last executing test programs: 2m22.635157904s ago: executing program 2 (id=1526): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b01", 0xc0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x4}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000740)='syzkaller\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)={0x14, 0x0, 0x800, 0x8, 0x25dfdbfb}, 0xc3f8}, 0x1, 0x0, 0x0, 0x8000}, 0x400c4) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m20.839155083s ago: executing program 2 (id=1532): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x68a, 0x101, 0x3}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x8}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m16.011992501s ago: executing program 2 (id=1536): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 2m14.965959829s ago: executing program 2 (id=1541): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2m13.723573738s ago: executing program 2 (id=1543): r0 = socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2m12.25083376s ago: executing program 2 (id=1547): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x48, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 1m56.515118172s ago: executing program 32 (id=1547): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x48, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 1m55.451972011s ago: executing program 0 (id=1583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 1m53.082042052s ago: executing program 0 (id=1588): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1m51.075844683s ago: executing program 0 (id=1592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 1m42.11954333s ago: executing program 0 (id=1598): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000a0a03b60000b70b0000000001000004090001007379d2"], 0x40}}, 0x4000) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m39.763857111s ago: executing program 0 (id=1603): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m38.427564584s ago: executing program 0 (id=1607): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000001400000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x5c3153ef303afdb3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@getlink={0x3c, 0x12, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8120, 0x6002}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xb6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 1m22.569221903s ago: executing program 33 (id=1607): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000001400000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x5c3153ef303afdb3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@getlink={0x3c, 0x12, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8120, 0x6002}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xb6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 13.745277698s ago: executing program 3 (id=1765): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74f", 0x86}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b01", 0xc0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x4}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000740)='syzkaller\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)={0x14, 0x0, 0x800, 0x8, 0x25dfdbfb}, 0xc3f8}, 0x1, 0x0, 0x0, 0x8000}, 0x400c4) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 13.418338026s ago: executing program 4 (id=1767): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000d0d755c4c9c47528ad", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf253e00", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4", 0x27, 0x840, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='rdma.current\x00', 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003b40)=[{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000500)="3200075cce0d466ecfc2529888dc3130c8e4834fc7e7948fe3c3f228ba8e77d86ec4310263499d03b049754eb2a91dd62fb12abc1c9de8718f08f6c649cf31cb456621229086ef26fe0e584d6b45b17ce35c5048b96e6c95a073d0ead4c72ba1855ce4d8632824750635e7209563d0d0", 0x70}, {&(0x7f0000000580)="a411da3d0b170d3d30ce88ba1c449e2e543c0b2f4f5ee9f1da9e92937a8258", 0x1f}], 0x2, 0x0, 0x0, 0x1000c090}], 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2}, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 13.118228522s ago: executing program 3 (id=1770): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, 0x0, 0x0) 12.786760021s ago: executing program 3 (id=1772): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.583969222s ago: executing program 6 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000880)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @initial, {0xd, 0x977}, @device_a, @value={0x4, 0x0, 0x1, 0x1, 0x4}, @value=@ver_80211n={0x0, 0x4581, 0x0, 0x2, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x3a, "8c55a3623f07823514d927139dc303709a8cead81a1e88d488d2c425c9420307efcf40e4342d239f662146e4dfc362fdb758d50e8a52c1421bc2"}, {@device_b, @device_a, 0xb6, "1aa600ad48868d11cf8e216152eed209d53b5c60f9d71ec11a3345573d8f592b3c1212349c228342b67826cab32b0cce889cfa6c81dfa16a42a75b87d923a2577e84343e8be78890d2cbd58172078d6f3e2aefc58914bfdacdb44002e941af6413db16e5112881df8e12ee3db0393c67f0bf8206bfee7c46f2d8aba6132fa9b42646b593e8493ad3675099ee65f6e319a4e49302d9de3ffefe291b308b21575c44138a3aef94252964860b2db05aaa887a332af38a66"}, {@broadcast, @device_b, 0x3a, "6432faf2a0a624331cc1eb0ce62bef62e84039ab69255203f3d416fd709e966244bec0a42f8ac96ad34b502de76fbeb40f918c2ac01bbe7f78d0"}, {@broadcast, @device_b, 0xa0, "af8193b0c3e0faac32754d21301dccd92dc8d389cd206c516fdefec8d192e3353a8bd88483a94fd255e20f0151f4f89dcab4cd14ac4f348fbd2cddac590200d192c5d3627326bca4052e1f6b28ca8b3a34c605b9604058ec13f7e2bea98910637e041deffaf026d60be0a1a66dbff44be892af63a019c427b52e115ddf501e68feb8ff84c88bd6de28333c88c3b7b33bbdd467beb90c91bbb881e7e494f71b59"}, {@device_b, @broadcast, 0x46, "9a5e4d2168db9d8ad9b03fe83c42941ec4014cc964f5afdc3bfbe5dd622291c9be528b787c4a92eb1b57f1d378d787e8ade3f44ca1ea28decabfdc0ddd7d50bdd2ead43f6b2e"}, {@device_b, @broadcast, 0x86, "1ae95e3fba2a1fdac881708eda9656af56235ffe1112d97ca266f2d8aab326d52473fdda3da9bee90ca7fd6dc0aa707ae759995b7d6fcf791832c4d0f3f0f9cf2c833704b8bf6788f33aa32621088fdc2bd75b515094a095c94533b1e30b535128d04baa12def3065e0fc396f809163891c6fa44686f7466c3f1da79a87a06cbc54d12aa7d9b"}]}, 0x310) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_a, @random="6b355660e32f", {0x5, 0x7}}, 0x2084, 0x5a, @random=0x3a9e, @void, @void, [{0xdd, 0x63, "f3591ec8a791d49fb81942e0e6ef929292c062439cccdf4957750267884e2d27c61b70b817e7e5cff32219a734d118bc808a217c3fea42bc54786d6cf918a5cdeb0aa4a20cbff2d479ef6d45bdd01a19035a18c3eb4e3ecb05fd6ba64cef68091f92ee"}, {0xdd, 0xd2, "bbb39c982c7e5be7590e3a6e52dc7d2246c0e91a683b877fc386d73395ea57609ec2803970448597e361a4af97ca22a9417a03f5a8f1d9a894e0ba924df693990e1328c68e2405b1d0320c532c89573830974ba4fb5be47d9ed4b7a230664bef302c162a6402180e016e62a08326639b00b7f2799274a482fb41d05dc0d17488c2a910f3ce954a1c16bca386e88471656fd332090fbfd71eda84ed87373142727caa26926f99558fd0526b170dfe51502db6536be611e67c95ca8b1ceb1fa8062c44d6131ae3c93c6ddad7687919f9caaa8f"}, {0xdd, 0x5d, "08ff3fb9c3eadf0d8da1cfa0bf378ce3d7a4c818e743a4c2332bd90a3dacb1dda8b220c10a57f6ffa9e6f1c7614afaf94e8c7d182f6ba06d6cee3ef5fae1acf42056aa191c3494870d8c8fbdff8e3da873aa1d4c3ee616221a8ec12b20"}, {0xdd, 0x20, "6e71de5b4ec51f46fc1cbc59e1478681abb8f57a9b253e6c096d0d0ef1365f38"}, {0xdd, 0xf3, "c0db6b6c7392c13d477b4e0921bd1252ec7704c7e95e824e88c3fb60811ef6591b987e075ead1679de796cd8379cbe754df28147056b2f5e2c272c1d48769d9b5aa0914e59e54afdc4de2b25ca6fc9667e739b3196142d2fe5999191c7c5fa38bf6554cd5036e086bec804f6d9ba778901f6a239917d101b716adf00364a34bef44b21937917ebac1150d37ab537c8dd51804b04d266ab69773194d745fc1985ae077ad63782966f75d61cf50853ab19a910377fbd1a199f09af471aed1c6834b2ea482821f88d6a7ddf3c9e006d8ec3a332c2018091b22f9b7cf263b798e1f0db1d58001a7d3351ad795e696014da172b4bb7"}, {0xdd, 0x63, "ebc9c1d48f4e6eee69b035c9d53b6c49e429c0ab8963dd9472cb53fb4abd48f1b508fe3195b744a83cd5d9c4ab99b141be211108fd6ca507b6dabbc04716d1815757f4e16e14c9114452560785ce3e98043e7255edbb424e276ece66f3bed8b01e7b95"}]}, 0x332) 12.516585386s ago: executing program 5 (id=1774): io_uring_setup(0x519, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0xfffffffffffffffe}, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0x2a818}}, 0x20}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) writev(r6, &(0x7f0000000100)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 12.068027241s ago: executing program 3 (id=1776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5515, &(0x7f0000001300)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000014c0)={0x28, 0x0, 0x2711, @local}, 0x10) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) 10.628850081s ago: executing program 5 (id=1777): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) 10.302167379s ago: executing program 1 (id=1778): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x1a, 0x1, 0x70bd2d, 0x0, {0x81, 0x80, 0x80}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 10.2872894s ago: executing program 4 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 9.280329045s ago: executing program 5 (id=1780): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000001c0), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000880)="b9aea652ff030703008cb89e0800", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.19410521s ago: executing program 6 (id=1781): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b01", 0xc0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x4}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000740)='syzkaller\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)={0x14, 0x0, 0x800, 0x8, 0x25dfdbfb}, 0xc3f8}, 0x1, 0x0, 0x0, 0x8000}, 0x400c4) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.954144683s ago: executing program 1 (id=1782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.512375258s ago: executing program 3 (id=1783): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401f, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5556, &(0x7f0000005a80)="$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") 8.345719147s ago: executing program 5 (id=1784): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRES8=r0, @ANYRES32=r0], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4080) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 8.067924743s ago: executing program 6 (id=1785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 7.953385569s ago: executing program 1 (id=1786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.740448821s ago: executing program 4 (id=1787): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f00000107c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@acl}]}, 0x1, 0x53a, &(0x7f0000010280)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0xc, r0, 0x10002, 0x0, 0x9, 0xfffffffffdffffff}) 7.430772918s ago: executing program 1 (id=1788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002200000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, 0x0, 0x0}, 0x20) 6.901139647s ago: executing program 5 (id=1789): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x26, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={r5, 0x40}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r5, 0xc, 0x101}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 6.65624018s ago: executing program 1 (id=1790): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@shortname_win95}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@errors_continue}, {@rodir}, {@shortname_win95}, {@fat=@debug}, {@numtail}, {@uni_xlateno}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@utf8no}, {@utf8}]}, 0x81, 0x2b1, &(0x7f00000015c0)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) 6.526526147s ago: executing program 6 (id=1791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000880)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @initial, {0xd, 0x977}, @device_a, @value={0x4, 0x0, 0x1, 0x1, 0x4}, @value=@ver_80211n={0x0, 0x4581, 0x0, 0x2, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x3a, "8c55a3623f07823514d927139dc303709a8cead81a1e88d488d2c425c9420307efcf40e4342d239f662146e4dfc362fdb758d50e8a52c1421bc2"}, {@device_b, @device_a, 0xb6, "1aa600ad48868d11cf8e216152eed209d53b5c60f9d71ec11a3345573d8f592b3c1212349c228342b67826cab32b0cce889cfa6c81dfa16a42a75b87d923a2577e84343e8be78890d2cbd58172078d6f3e2aefc58914bfdacdb44002e941af6413db16e5112881df8e12ee3db0393c67f0bf8206bfee7c46f2d8aba6132fa9b42646b593e8493ad3675099ee65f6e319a4e49302d9de3ffefe291b308b21575c44138a3aef94252964860b2db05aaa887a332af38a66"}, {@broadcast, @device_b, 0x3a, "6432faf2a0a624331cc1eb0ce62bef62e84039ab69255203f3d416fd709e966244bec0a42f8ac96ad34b502de76fbeb40f918c2ac01bbe7f78d0"}, {@broadcast, @device_b, 0xa0, "af8193b0c3e0faac32754d21301dccd92dc8d389cd206c516fdefec8d192e3353a8bd88483a94fd255e20f0151f4f89dcab4cd14ac4f348fbd2cddac590200d192c5d3627326bca4052e1f6b28ca8b3a34c605b9604058ec13f7e2bea98910637e041deffaf026d60be0a1a66dbff44be892af63a019c427b52e115ddf501e68feb8ff84c88bd6de28333c88c3b7b33bbdd467beb90c91bbb881e7e494f71b59"}, {@device_b, @broadcast, 0x69, "9a5e4d2168db9d8ad9b03fe83c42941ec4014cc964f5afdc3bfbe5dd622291c9be528b787c4a92eb1b57f1d378d787e8ade3f44ca1ea28decabfdc0ddd7d50bdd2ead43f6b2e0a2bc809809ac09fba839ac36b9d667a6d5506dc2390954e42cec22b99fbf243a28aeb"}, {@device_b, @broadcast, 0x86, "1ae95e3fba2a1fdac881708eda9656af56235ffe1112d97ca266f2d8aab326d52473fdda3da9bee90ca7fd6dc0aa707ae759995b7d6fcf791832c4d0f3f0f9cf2c833704b8bf6788f33aa32621088fdc2bd75b515094a095c94533b1e30b535128d04baa12def3065e0fc396f809163891c6fa44686f7466c3f1da79a87a06cbc54d12aa7d9b"}]}, 0x334) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_a, @random="6b355660e32f", {0x5, 0x7}}, 0x2084, 0x5a, @random=0x3a9e, @void, @void, [{0xdd, 0x63, "f3591ec8a791d49fb81942e0e6ef929292c062439cccdf4957750267884e2d27c61b70b817e7e5cff32219a734d118bc808a217c3fea42bc54786d6cf918a5cdeb0aa4a20cbff2d479ef6d45bdd01a19035a18c3eb4e3ecb05fd6ba64cef68091f92ee"}, {0xdd, 0xd2, "bbb39c982c7e5be7590e3a6e52dc7d2246c0e91a683b877fc386d73395ea57609ec2803970448597e361a4af97ca22a9417a03f5a8f1d9a894e0ba924df693990e1328c68e2405b1d0320c532c89573830974ba4fb5be47d9ed4b7a230664bef302c162a6402180e016e62a08326639b00b7f2799274a482fb41d05dc0d17488c2a910f3ce954a1c16bca386e88471656fd332090fbfd71eda84ed87373142727caa26926f99558fd0526b170dfe51502db6536be611e67c95ca8b1ceb1fa8062c44d6131ae3c93c6ddad7687919f9caaa8f"}, {0xdd, 0x5d, "08ff3fb9c3eadf0d8da1cfa0bf378ce3d7a4c818e743a4c2332bd90a3dacb1dda8b220c10a57f6ffa9e6f1c7614afaf94e8c7d182f6ba06d6cee3ef5fae1acf42056aa191c3494870d8c8fbdff8e3da873aa1d4c3ee616221a8ec12b20"}, {0xdd, 0x20, "6e71de5b4ec51f46fc1cbc59e1478681abb8f57a9b253e6c096d0d0ef1365f38"}, {0xdd, 0xf3, "c0db6b6c7392c13d477b4e0921bd1252ec7704c7e95e824e88c3fb60811ef6591b987e075ead1679de796cd8379cbe754df28147056b2f5e2c272c1d48769d9b5aa0914e59e54afdc4de2b25ca6fc9667e739b3196142d2fe5999191c7c5fa38bf6554cd5036e086bec804f6d9ba778901f6a239917d101b716adf00364a34bef44b21937917ebac1150d37ab537c8dd51804b04d266ab69773194d745fc1985ae077ad63782966f75d61cf50853ab19a910377fbd1a199f09af471aed1c6834b2ea482821f88d6a7ddf3c9e006d8ec3a332c2018091b22f9b7cf263b798e1f0db1d58001a7d3351ad795e696014da172b4bb7"}, {0xdd, 0x63, "ebc9c1d48f4e6eee69b035c9d53b6c49e429c0ab8963dd9472cb53fb4abd48f1b508fe3195b744a83cd5d9c4ab99b141be211108fd6ca507b6dabbc04716d1815757f4e16e14c9114452560785ce3e98043e7255edbb424e276ece66f3bed8b01e7b95"}]}, 0x332) 6.404743324s ago: executing program 4 (id=1792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYBLOB="97b61e88553572fd2efdef5bcdc603f5cf17a49bf1d8457078ace3df30c7c941b1103b86953f4b1b43816a58622af5d511ff04c37a8893dc5ea494888e218c88326783f69ee710da511f74fe812d33a93825fb7eb8eca7196d483f5689286f28bf447eca9c6676aad40948ce1a2154e82ce6ecb85f76965d75d05e46"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") ioprio_get$pid(0x3, r0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) 5.908349482s ago: executing program 1 (id=1793): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r3, 0x26, &(0x7f0000000080)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x2}}, {@nodiscard}, {@noblock_validity}, {@abort}]}, 0x1, 0xbb4, &(0x7f0000000600)="$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") flock(r2, 0x1) r4 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) flock(r4, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 3.267448078s ago: executing program 4 (id=1794): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000001c0), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000880)="b9aea652ff030703008cb89e0800", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.114978507s ago: executing program 6 (id=1795): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b01", 0xc0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x4}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000740)='syzkaller\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)={0x14, 0x0, 0x800, 0x8, 0x25dfdbfb}, 0xc3f8}, 0x1, 0x0, 0x0, 0x8000}, 0x400c4) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.780230316s ago: executing program 4 (id=1796): socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) mkdir(0x0, 0x3) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x4b, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @private2, 0x4}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000001c0)="$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") 2.739576337s ago: executing program 3 (id=1797): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="ec1000003d00010325bd7000fcffffff01"], 0x10ec}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x4, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'team_slave_1\x00', 0x6bf1c2d5adba8c32}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)}, 0x240009bd) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4008014) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x1f00, 0x69, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 2.683089341s ago: executing program 5 (id=1798): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=1799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r0, &(0x7f00000047c0), &(0x7f0000004880)=@udp, 0x1}, 0x20) kernel console output (not intermixed with test programs): ller0 entered promiscuous mode [ 212.572548][ T6438] device veth0 entered promiscuous mode [ 213.078387][ T4323] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 213.261372][ T6436] device veth0 left promiscuous mode [ 213.277619][ T4323] usb 5-1: Using ep0 maxpacket: 8 [ 213.298322][ T4323] usb 5-1: config 12 has an invalid interface number: 188 but max is 1 [ 213.327986][ T4323] usb 5-1: config 12 has no interface number 0 [ 213.334258][ T4323] usb 5-1: config 12 interface 1 altsetting 2 endpoint 0x88 has an invalid bInterval 247, changing to 11 [ 213.384883][ T4323] usb 5-1: config 12 interface 188 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 64 [ 213.426321][ T4323] usb 5-1: config 12 interface 188 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 213.466288][ T4323] usb 5-1: config 12 interface 1 has no altsetting 0 [ 213.481657][ T4323] usb 5-1: config 12 interface 188 has no altsetting 0 [ 213.503884][ T4323] usb 5-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 213.527063][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.535625][ T4323] usb 5-1: Product: syz [ 213.545803][ T4323] usb 5-1: Manufacturer: syz [ 213.550880][ T4323] usb 5-1: SerialNumber: syz [ 213.617003][ T6346] Set syz1 is full, maxelem 65536 reached [ 213.828081][ T4323] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 213.835724][ T4323] usb 5-1: selecting invalid altsetting 0 [ 213.857889][ T2309] pvrusb2: control-write URB failure, status=-71 [ 213.864387][ T2309] pvrusb2: Device being rendered inoperable [ 213.881201][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 213.897312][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 213.964572][ T6460] loop2: detected capacity change from 0 to 16 [ 213.976430][ T6460] erofs: Unknown parameter './cgroup.net/syz1' [ 214.185582][ T4323] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 214.365055][ T4323] usb 5-1: selecting invalid altsetting 0 [ 214.537162][ T2309] pvrusb2: control-write URB failure, status=-71 [ 214.549262][ T2309] pvrusb2: Device being rendered inoperable [ 214.565608][ T4323] usb 5-1: USB disconnect, device number 21 [ 214.580412][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 214.666187][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 214.877577][ T26] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 215.095440][ T26] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 215.120887][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.167637][ T26] usb 2-1: Product: syz [ 215.197574][ T26] usb 2-1: Manufacturer: syz [ 215.217488][ T26] usb 2-1: SerialNumber: syz [ 215.251593][ T26] usb 2-1: config 0 descriptor?? [ 215.485204][ T26] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.188055][ T31] nci: nci_rx_work: unknown MT 0x7 [ 216.339218][ T6501] device syzkaller0 entered promiscuous mode [ 216.907707][ T26] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 216.923363][ T26] usb 2-1: USB disconnect, device number 10 [ 218.015638][ T6521] loop3: detected capacity change from 0 to 16 [ 218.027835][ T6521] erofs: Unknown parameter './cgroup.net/syz1' [ 218.117626][ T6522] loop1: detected capacity change from 0 to 512 [ 218.263956][ T6522] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.385920][ T6522] EXT4-fs (loop1): 1 truncate cleaned up [ 218.391813][ T6522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 218.951507][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 219.052728][ T6485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.431270][ T6528] device syzkaller0 entered promiscuous mode [ 220.914381][ T6548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.638123][ T6590] loop1: detected capacity change from 0 to 16 [ 221.648791][ T6590] erofs: Unknown parameter './cgroup.net/syz1' [ 223.490637][ T4323] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 223.674492][ T4298] nci: nci_rx_work: unknown MT 0x7 [ 223.681852][ T4323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.702482][ T4323] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 223.721877][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.739865][ T4323] usb 3-1: config 0 descriptor?? [ 223.748232][ T4323] pwc: Askey VC010 type 2 USB webcam detected. [ 223.951396][ T4323] pwc: send_video_command error -71 [ 223.956822][ T4323] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 223.977991][ T4323] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 224.003394][ T4323] usb 3-1: USB disconnect, device number 6 [ 224.529205][ T4323] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 224.729212][ T4323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.742696][ T4323] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 224.752012][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.773329][ T4323] usb 3-1: config 0 descriptor?? [ 224.782308][ T4323] pwc: Askey VC010 type 2 USB webcam detected. [ 224.993341][ T6657] netlink: 108 bytes leftover after parsing attributes in process `syz.0.713'. [ 225.181818][ T4323] pwc: recv_control_msg error -32 req 02 val 2b00 [ 225.189114][ T4323] pwc: recv_control_msg error -32 req 02 val 2700 [ 225.196177][ T4323] pwc: recv_control_msg error -32 req 02 val 2c00 [ 225.203480][ T4323] pwc: recv_control_msg error -32 req 04 val 1000 [ 225.211120][ T4323] pwc: recv_control_msg error -32 req 04 val 1300 [ 225.218511][ T4323] pwc: recv_control_msg error -32 req 04 val 1400 [ 225.225510][ T4323] pwc: recv_control_msg error -32 req 02 val 2000 [ 225.232884][ T4323] pwc: recv_control_msg error -32 req 02 val 2100 [ 225.240586][ T4323] pwc: recv_control_msg error -32 req 04 val 1500 [ 225.248194][ T4323] pwc: recv_control_msg error -32 req 02 val 2500 [ 225.255150][ T4323] pwc: recv_control_msg error -32 req 02 val 2400 [ 225.262309][ T4323] pwc: recv_control_msg error -32 req 02 val 2600 [ 225.269614][ T4323] pwc: recv_control_msg error -32 req 02 val 2900 [ 225.276582][ T4323] pwc: recv_control_msg error -32 req 02 val 2800 [ 225.367404][ T4318] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 225.484825][ T4323] pwc: recv_control_msg error -71 req 04 val 1200 [ 225.492950][ T4323] pwc: Registered as video103. [ 225.499762][ T4323] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 225.522425][ T4323] usb 3-1: USB disconnect, device number 7 [ 225.567444][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 225.575433][ T4318] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 225.593901][ T4318] usb 1-1: config 0 has no interface number 0 [ 225.605224][ T4318] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 225.620216][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.630595][ T4318] usb 1-1: Product: syz [ 225.634822][ T4318] usb 1-1: Manufacturer: syz [ 225.642925][ T4318] usb 1-1: SerialNumber: syz [ 225.652430][ T4318] usb 1-1: config 0 descriptor?? [ 225.663062][ T4318] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 225.865517][ T4318] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 225.879165][ T4318] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 226.274998][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 226.285730][ T4318] usb 1-1: USB disconnect, device number 23 [ 226.305331][ T4318] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 226.351904][ T4318] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 226.374032][ T4318] quatech2 1-1:0.51: device disconnected [ 226.562295][ T6614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.112174][ T6671] device syzkaller0 entered promiscuous mode [ 227.831910][ T4324] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 228.029305][ T4324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.052694][ T4324] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 228.072598][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.095075][ T4324] usb 2-1: config 0 descriptor?? [ 228.115361][ T4324] pwc: Askey VC010 type 2 USB webcam detected. [ 228.260809][ T6022] nci: nci_rx_work: unknown MT 0x7 [ 228.321308][ T4324] pwc: send_video_command error -71 [ 228.331522][ T4324] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 228.345877][ T4324] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 228.356722][ T4324] usb 2-1: USB disconnect, device number 11 [ 228.918517][ T4324] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 229.109298][ T4324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.119903][ T4324] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.129502][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.145454][ T4324] usb 2-1: config 0 descriptor?? [ 229.173292][ T4324] pwc: Askey VC010 type 2 USB webcam detected. [ 229.565114][ T4324] pwc: recv_control_msg error -32 req 02 val 2b00 [ 229.576283][ T4324] pwc: recv_control_msg error -32 req 02 val 2700 [ 229.593943][ T4324] pwc: recv_control_msg error -32 req 02 val 2c00 [ 229.613819][ T4324] pwc: recv_control_msg error -32 req 04 val 1000 [ 229.633758][ T4324] pwc: recv_control_msg error -32 req 04 val 1300 [ 229.655789][ T4324] pwc: recv_control_msg error -32 req 04 val 1400 [ 229.673899][ T4324] pwc: recv_control_msg error -32 req 02 val 2000 [ 229.681767][ T4324] pwc: recv_control_msg error -32 req 02 val 2100 [ 229.695104][ T4324] pwc: recv_control_msg error -32 req 04 val 1500 [ 229.702743][ T4324] pwc: recv_control_msg error -32 req 02 val 2500 [ 229.716294][ T4324] pwc: recv_control_msg error -32 req 02 val 2400 [ 229.724182][ T4324] pwc: recv_control_msg error -32 req 02 val 2600 [ 229.736577][ T4324] pwc: recv_control_msg error -32 req 02 val 2900 [ 229.744160][ T4324] pwc: recv_control_msg error -32 req 02 val 2800 [ 229.959215][ T4324] pwc: recv_control_msg error -71 req 04 val 1200 [ 229.970915][ T4324] pwc: Registered as video103. [ 229.998730][ T4324] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 230.017641][ T4318] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 230.026725][ T4324] usb 2-1: USB disconnect, device number 12 [ 230.227429][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 230.234551][ T4318] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 230.257531][ T4318] usb 4-1: config 0 has no interface number 0 [ 230.266095][ T4318] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 230.287361][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.295526][ T4318] usb 4-1: Product: syz [ 230.307447][ T4318] usb 4-1: Manufacturer: syz [ 230.312203][ T4318] usb 4-1: SerialNumber: syz [ 230.328935][ T4318] usb 4-1: config 0 descriptor?? [ 230.339666][ T4318] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 230.539551][ T4318] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 230.573448][ T4318] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 230.632402][ T6720] device syzkaller0 entered promiscuous mode [ 230.943514][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 230.952336][ T4318] usb 4-1: USB disconnect, device number 8 [ 230.962225][ T4318] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 230.991036][ T4318] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 231.011576][ T4318] quatech2 4-1:0.51: device disconnected [ 231.032689][ T6729] device veth0 entered promiscuous mode [ 231.142321][ T6704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.157230][ T6727] device veth0 left promiscuous mode [ 231.574453][ T6738] device syzkaller0 entered promiscuous mode [ 231.661736][ T6740] loop1: detected capacity change from 0 to 16 [ 231.672206][ T6740] erofs: Unknown parameter './cgroup.net/syz1' [ 233.275729][ T6760] device syzkaller0 entered promiscuous mode [ 233.615060][ T6762] device veth0 entered promiscuous mode [ 233.650588][ T6766] 9pnet_fd: Insufficient options for proto=fd [ 233.692972][ T6761] device veth0 left promiscuous mode [ 233.935611][ T6777] tipc: Enabled bearer , priority 0 [ 233.963692][ T6777] device syzkaller0 entered promiscuous mode [ 234.017346][ T6777] tipc: Resetting bearer [ 234.028245][ T6775] tipc: Resetting bearer [ 234.088734][ T6775] tipc: Disabling bearer [ 234.668815][ T6803] loop4: detected capacity change from 0 to 16 [ 234.679180][ T6803] erofs: Unknown parameter './cgroup.net/syz1' [ 234.908213][ T4258] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.375851][ T6804] 9pnet_fd: Insufficient options for proto=fd [ 235.488159][ T6807] device veth0 entered promiscuous mode [ 235.515284][ T6806] device veth0 left promiscuous mode [ 236.539914][ T6826] tipc: Enabled bearer , priority 0 [ 236.578390][ T6826] device syzkaller0 entered promiscuous mode [ 236.646710][ T6826] tipc: Resetting bearer [ 236.670083][ T6825] tipc: Resetting bearer [ 236.768605][ T6825] tipc: Disabling bearer [ 236.827101][ T6836] device syzkaller0 entered promiscuous mode [ 236.961866][ T6840] device veth0 entered promiscuous mode [ 236.968724][ T6838] device veth0 left promiscuous mode [ 237.917373][ T6869] loop2: detected capacity change from 0 to 16 [ 237.928221][ T6869] erofs: Unknown parameter './cgroup.net/syz1' [ 238.387963][ T6860] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 238.936911][ T6875] device veth0 entered promiscuous mode [ 238.954424][ T6874] device veth0 left promiscuous mode [ 239.386766][ T6884] device veth0 entered promiscuous mode [ 239.433144][ T6882] device veth0 left promiscuous mode [ 239.521014][ T6886] device syzkaller0 entered promiscuous mode [ 239.648207][ T6886] tipc: Started in network mode [ 239.687677][ T6886] tipc: Node identity ba484af868cd, cluster identity 4711 [ 239.778911][ T6886] tipc: Enabled bearer , priority 0 [ 239.887659][ T6885] tipc: Resetting bearer [ 240.034856][ T6885] tipc: Disabling bearer [ 240.064533][ T6894] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (129) [ 240.333970][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 240.365569][ T6899] device syzkaller0 entered promiscuous mode [ 240.555614][ T6909] loop4: detected capacity change from 0 to 512 [ 240.695355][ T6909] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.720566][ T6913] netlink: 14 bytes leftover after parsing attributes in process `syz.0.804'. [ 240.937229][ T6909] EXT4-fs (loop4): 1 truncate cleaned up [ 240.988049][ T6090] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 241.001310][ T6909] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 242.833694][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 243.147547][ T4324] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 243.334734][ T4324] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 243.343941][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.355574][ T4324] usb 5-1: Product: syz [ 243.359843][ T4324] usb 5-1: Manufacturer: syz [ 243.364480][ T4324] usb 5-1: SerialNumber: syz [ 243.375268][ T4324] usb 5-1: config 0 descriptor?? [ 243.585816][ T4324] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.838617][ T6918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.082685][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 244.857417][ T4270] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 244.881559][ T31] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 245.005936][ T4324] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 245.015294][ T4324] usb 5-1: USB disconnect, device number 22 [ 245.049430][ T4270] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.060263][ T4270] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 245.075644][ T4270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.087211][ T4270] usb 3-1: config 0 descriptor?? [ 245.097052][ T4270] pwc: Askey VC010 type 2 USB webcam detected. [ 245.299155][ T4270] pwc: send_video_command error -71 [ 245.304572][ T4270] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 245.313315][ T4270] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 245.321999][ T4270] usb 3-1: USB disconnect, device number 8 [ 245.887725][ T4270] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 246.089813][ T4270] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.100353][ T4270] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 246.109681][ T4270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.119985][ T4270] usb 3-1: config 0 descriptor?? [ 246.127586][ T4270] pwc: Askey VC010 type 2 USB webcam detected. [ 246.531306][ T4270] pwc: recv_control_msg error -32 req 02 val 2b00 [ 246.539295][ T4270] pwc: recv_control_msg error -32 req 02 val 2700 [ 246.546403][ T4270] pwc: recv_control_msg error -32 req 02 val 2c00 [ 246.557231][ T4270] pwc: recv_control_msg error -32 req 04 val 1000 [ 246.564519][ T4270] pwc: recv_control_msg error -32 req 04 val 1300 [ 246.575137][ T4270] pwc: recv_control_msg error -32 req 04 val 1400 [ 246.582418][ T4270] pwc: recv_control_msg error -32 req 02 val 2000 [ 246.590014][ T4270] pwc: recv_control_msg error -32 req 02 val 2100 [ 246.597162][ T4270] pwc: recv_control_msg error -32 req 04 val 1500 [ 246.604300][ T4270] pwc: recv_control_msg error -32 req 02 val 2500 [ 246.611504][ T4270] pwc: recv_control_msg error -32 req 02 val 2400 [ 246.618702][ T4270] pwc: recv_control_msg error -32 req 02 val 2600 [ 246.626098][ T4270] pwc: recv_control_msg error -32 req 02 val 2900 [ 246.633341][ T4270] pwc: recv_control_msg error -32 req 02 val 2800 [ 246.841340][ T4270] pwc: recv_control_msg error -71 req 04 val 1200 [ 246.851985][ T4270] pwc: Registered as video103. [ 246.859567][ T4270] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 246.874618][ T4270] usb 3-1: USB disconnect, device number 9 [ 247.394245][ T6996] netlink: 'syz.2.831': attribute type 27 has an invalid length. [ 247.743964][ T6976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.940573][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.949301][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.998358][ T7028] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 249.006128][ T7028] netlink: 120 bytes leftover after parsing attributes in process `syz.1.840'. [ 249.208828][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.265731][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.715890][ T6996] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.724753][ T6996] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.733688][ T6996] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.742386][ T6996] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.775545][ T6996] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.784039][ T6996] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.792620][ T6996] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.801050][ T6996] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.853787][ T6997] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.863085][ T6997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.871618][ T6997] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.881322][ T6997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.140451][ T7039] tipc: Enabling of bearer rejected, failed to enable media [ 250.307711][ T4324] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 250.509343][ T4324] usb 5-1: config 0 has no interfaces? [ 250.517600][ T4324] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 250.557790][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.566000][ T4324] usb 5-1: Product: syz [ 250.577907][ T4324] usb 5-1: Manufacturer: syz [ 250.590502][ T4324] usb 5-1: SerialNumber: syz [ 250.597405][ T4324] usb 5-1: config 0 descriptor?? [ 250.636460][ T7055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.721212][ T7056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.797059][ T7055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.824816][ T7055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.866565][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 251.162129][ T4320] usb 5-1: USB disconnect, device number 23 [ 251.189778][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'. [ 252.249716][ T7100] loop1: detected capacity change from 0 to 512 [ 252.343661][ T7100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 252.420542][ T7100] EXT4-fs (loop1): 1 truncate cleaned up [ 252.426273][ T7100] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 252.638611][ T4320] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 252.722831][ T7108] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 252.847493][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 252.855646][ T4320] usb 4-1: config 12 has an invalid interface number: 188 but max is 1 [ 252.886246][ T4320] usb 4-1: config 12 has no interface number 0 [ 252.895847][ T4320] usb 4-1: config 12 interface 1 altsetting 2 endpoint 0x88 has an invalid bInterval 247, changing to 11 [ 252.917574][ T4320] usb 4-1: config 12 interface 188 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 64 [ 252.922314][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 252.957403][ T4320] usb 4-1: config 12 interface 188 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 252.988819][ T4320] usb 4-1: config 12 interface 1 has no altsetting 0 [ 252.995692][ T4320] usb 4-1: config 12 interface 188 has no altsetting 0 [ 253.032131][ T4320] usb 4-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 253.077635][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.101333][ T4320] usb 4-1: Product: syz [ 253.105594][ T4320] usb 4-1: Manufacturer: syz [ 253.127420][ T4320] usb 4-1: SerialNumber: syz [ 253.354975][ T4320] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 253.373541][ T4320] usb 4-1: selecting invalid altsetting 0 [ 253.390720][ T2309] pvrusb2: Invalid write control endpoint [ 253.447679][ T26] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 253.559950][ T4320] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 253.588017][ T4320] usb 4-1: selecting invalid altsetting 0 [ 253.617164][ T2309] pvrusb2: Invalid write control endpoint [ 253.633028][ T4320] usb 4-1: USB disconnect, device number 9 [ 253.637792][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 253.657445][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 253.666801][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 253.668700][ T26] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 253.688603][ T26] usb 5-1: config 0 has no interface number 0 [ 253.709110][ T26] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 253.720072][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 253.728326][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.747454][ T26] usb 5-1: Product: syz [ 253.755859][ T2309] pvrusb2: Device being rendered inoperable [ 253.767496][ T26] usb 5-1: Manufacturer: syz [ 253.775699][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 253.787390][ T26] usb 5-1: SerialNumber: syz [ 253.797092][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 253.801918][ T26] usb 5-1: config 0 descriptor?? [ 253.809241][ T2309] pvrusb2: Attached sub-driver cx25840 [ 253.840641][ T26] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 253.857676][ T4319] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 253.933533][ T2309] pvrusb2: Attempted to execute control transfer when device not ok [ 253.953133][ T2309] pvrusb2: Attempted to execute control transfer when device not ok [ 253.964885][ T2309] pvrusb2: Attempted to execute control transfer when device not ok [ 253.979485][ T2309] pvrusb2: Attempted to execute control transfer when device not ok [ 253.991683][ T2309] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 254.044490][ T26] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 254.064896][ T4319] usb 3-1: config 0 has no interfaces? [ 254.073047][ T4319] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 254.087765][ T26] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 254.103008][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.162909][ T4319] usb 3-1: Product: syz [ 254.187557][ T4319] usb 3-1: Manufacturer: syz [ 254.207388][ T4319] usb 3-1: SerialNumber: syz [ 254.248088][ T4319] usb 3-1: config 0 descriptor?? [ 254.454933][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 254.463408][ T26] usb 5-1: USB disconnect, device number 24 [ 254.483436][ T26] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 254.522420][ T2309] TUNER: Unable to find symbol tda829x_probe() [ 254.531857][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 254.546840][ T26] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 254.578930][ T26] quatech2 5-1:0.51: device disconnected [ 254.724037][ T2309] DVB: Unable to find symbol tda9887_attach() [ 254.731357][ T2309] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 254.756206][ T2309] pvrusb2: Attached sub-driver tuner [ 254.774517][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 254.805564][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 254.851577][ T2309] pvrusb2: Invalid write control endpoint [ 254.869152][ T26] usb 3-1: USB disconnect, device number 10 [ 254.955164][ T2309] pvrusb2: Invalid write control endpoint [ 254.967772][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 254.977270][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 254.994958][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 255.027380][ T2309] pvrusb2: Device being rendered inoperable [ 255.033420][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 255.040869][ T4319] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 255.057804][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 255.078025][ T2309] pvrusb2: Attached sub-driver cx25840 [ 255.192820][ T7146] device syzkaller0 entered promiscuous mode [ 255.227581][ T2309] pvrusb2: Attempted to execute control transfer when device not ok [ 255.235740][ T2309] pvrusb2: Attempted to execute control transfer when device not ok [ 255.257466][ T2309] pvrusb2: Attempted to execute control transfer when device not ok [ 255.269879][ T4319] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 255.287378][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.295435][ T4319] usb 1-1: Product: syz [ 255.299837][ T2309] pvrusb2: Attempted to execute control transfer when device not ok [ 255.317370][ T2309] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 255.334449][ T4319] usb 1-1: Manufacturer: syz [ 255.347366][ T4319] usb 1-1: SerialNumber: syz [ 255.358492][ T4319] usb 1-1: config 0 descriptor?? [ 255.571266][ T4319] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.713782][ T2309] TUNER: Unable to find symbol tda829x_probe() [ 255.860880][ T2309] DVB: Unable to find symbol tda9887_attach() [ 255.874320][ T2309] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 255.894835][ T2309] pvrusb2: Attached sub-driver tuner [ 255.901610][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 255.920970][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 256.019856][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.026304][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.347448][ T4320] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 256.563567][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.577407][ T4320] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 256.586586][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.623567][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 256.626304][ T4320] usb 4-1: config 0 descriptor?? [ 256.649185][ T4320] pwc: Askey VC010 type 2 USB webcam detected. [ 256.841135][ T4320] pwc: send_video_command error -71 [ 256.856445][ T4320] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 256.887413][ T4320] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 256.912510][ T4320] usb 4-1: USB disconnect, device number 10 [ 257.039402][ T4319] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 257.053184][ T4319] usb 1-1: USB disconnect, device number 24 [ 257.462502][ T4320] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 257.669185][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.679768][ T4320] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 257.689279][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.700799][ T4320] usb 4-1: config 0 descriptor?? [ 257.710557][ T4320] pwc: Askey VC010 type 2 USB webcam detected. [ 258.047614][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 258.118802][ T4320] pwc: recv_control_msg error -32 req 02 val 2b00 [ 258.136403][ T4320] pwc: recv_control_msg error -32 req 02 val 2700 [ 258.172121][ T4320] pwc: recv_control_msg error -32 req 02 val 2c00 [ 258.188700][ T4320] pwc: recv_control_msg error -32 req 04 val 1000 [ 258.220028][ T4320] pwc: recv_control_msg error -32 req 04 val 1300 [ 258.258180][ T4320] pwc: recv_control_msg error -32 req 04 val 1400 [ 258.272832][ T4320] pwc: recv_control_msg error -32 req 02 val 2000 [ 258.281324][ T4320] pwc: recv_control_msg error -32 req 02 val 2100 [ 258.289191][ T4320] pwc: recv_control_msg error -32 req 04 val 1500 [ 258.302518][ T4320] pwc: recv_control_msg error -32 req 02 val 2500 [ 258.316931][ T4320] pwc: recv_control_msg error -32 req 02 val 2400 [ 259.210440][ T4320] pwc: recv_control_msg error -32 req 02 val 2600 [ 259.218041][ T4320] pwc: recv_control_msg error -32 req 02 val 2900 [ 259.225078][ T4320] pwc: recv_control_msg error -32 req 02 val 2800 [ 259.311427][ T7169] tipc: Enabled bearer , priority 0 [ 259.384914][ T7163] tipc: Resetting bearer [ 259.448287][ T4320] pwc: recv_control_msg error -71 req 04 val 1200 [ 259.492195][ T4320] pwc: Registered as video103. [ 259.525345][ T4320] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 259.615518][ T4320] usb 4-1: USB disconnect, device number 11 [ 259.623145][ T7162] tipc: Disabling bearer [ 261.275694][ T7228] loop4: detected capacity change from 0 to 128 [ 261.291048][ T7228] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.331822][ T7228] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.672284][ T56] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.023174][ T26] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 262.224855][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.243374][ T26] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.252946][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.271304][ T26] usb 5-1: config 0 descriptor?? [ 262.299089][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 262.498741][ T26] pwc: send_video_command error -71 [ 262.504060][ T26] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 262.518335][ T26] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 262.533312][ T26] usb 5-1: USB disconnect, device number 25 [ 263.100876][ T26] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 263.303892][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 263.337417][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.352305][ T26] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 263.361989][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.385927][ T26] usb 5-1: config 0 descriptor?? [ 263.418315][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 263.623279][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 263.814029][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 263.822028][ T7233] device syzkaller0 entered promiscuous mode [ 263.829907][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 263.847550][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 263.895958][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 263.918020][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 263.945357][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 263.955498][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 263.975042][ T26] pwc: recv_control_msg error -32 req 02 val 2100 [ 263.992210][ T7237] tipc: Started in network mode [ 263.997147][ T7237] tipc: Node identity 7ebc541f4935, cluster identity 4711 [ 264.016615][ T26] pwc: recv_control_msg error -32 req 04 val 1500 [ 264.041685][ T26] pwc: recv_control_msg error -32 req 02 val 2500 [ 264.055549][ T26] pwc: recv_control_msg error -32 req 02 val 2400 [ 264.063743][ T7237] tipc: Enabled bearer , priority 0 [ 264.084784][ T26] pwc: recv_control_msg error -32 req 02 val 2600 [ 264.092398][ T26] pwc: recv_control_msg error -32 req 02 val 2900 [ 264.128117][ T26] pwc: recv_control_msg error -32 req 02 val 2800 [ 264.135328][ T7238] device syzkaller0 entered promiscuous mode [ 264.213552][ T7236] tipc: Resetting bearer [ 264.324577][ T7236] tipc: Disabling bearer [ 264.342039][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 264.353080][ T26] pwc: Registered as video103. [ 264.370490][ T26] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 264.409661][ T26] usb 5-1: USB disconnect, device number 26 [ 267.981241][ T7302] device syzkaller0 entered promiscuous mode [ 268.689390][ T7332] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (129) [ 268.974589][ T7313] loop3: detected capacity change from 0 to 512 [ 269.010351][ T7313] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 269.022893][ T7337] device syzkaller0 entered promiscuous mode [ 269.063477][ T7313] EXT4-fs (loop3): 1 truncate cleaned up [ 269.072787][ T7313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 269.224054][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 269.970010][ T7370] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (129) [ 270.239136][ T7377] device syzkaller0 entered promiscuous mode [ 270.676115][ T7384] loop2: detected capacity change from 0 to 512 [ 270.690866][ T7384] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 270.742851][ T7384] EXT4-fs (loop2): 1 truncate cleaned up [ 270.748723][ T7384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 271.407492][ T4319] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 271.607500][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 271.615201][ T4319] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 271.642841][ T4319] usb 2-1: config 0 has no interface number 0 [ 271.664340][ T4319] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 271.687318][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.707479][ T4319] usb 2-1: Product: syz [ 271.715690][ T4319] usb 2-1: Manufacturer: syz [ 271.733724][ T4319] usb 2-1: SerialNumber: syz [ 271.749431][ T4319] usb 2-1: config 0 descriptor?? [ 271.765857][ T4319] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 271.963825][ T4319] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 271.985370][ T4319] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 272.388689][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 272.398141][ T4319] usb 2-1: USB disconnect, device number 13 [ 272.422242][ T4319] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 272.445955][ T4319] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 272.460601][ T4319] quatech2 2-1:0.51: device disconnected [ 272.625377][ T7412] netlink: 'syz.0.957': attribute type 27 has an invalid length. [ 273.752683][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.768189][ T7413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.776151][ T7413] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.793426][ T7413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.853289][ T7441] tipc: Enabled bearer , priority 0 [ 273.913402][ T7441] device syzkaller0 entered promiscuous mode [ 273.968729][ T7440] tipc: Resetting bearer [ 274.038811][ T7440] tipc: Disabling bearer [ 274.076985][ T7444] device syzkaller0 entered promiscuous mode [ 274.289473][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 274.647128][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.710162][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.801980][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.838101][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.126071][ T7467] tipc: Enabled bearer , priority 0 [ 275.164381][ T7467] device syzkaller0 entered promiscuous mode [ 275.811475][ T7466] tipc: Resetting bearer [ 275.965052][ T7469] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 276.078895][ T7466] tipc: Disabling bearer [ 276.131176][ T7474] tipc: Enabled bearer , priority 0 [ 276.148874][ T7476] device syzkaller0 entered promiscuous mode [ 276.176411][ T7479] device syzkaller0 entered promiscuous mode [ 276.403072][ T7474] tipc: Resetting bearer [ 276.453543][ T7472] tipc: Resetting bearer [ 276.541093][ T7472] tipc: Disabling bearer [ 278.404383][ T7501] netlink: 14 bytes leftover after parsing attributes in process `syz.4.986'. [ 278.659883][ T7527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.993'. [ 279.391736][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1001'. [ 279.745523][ T7561] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1005'. [ 280.148617][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.209776][ T7569] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 280.314671][ T7571] loop4: detected capacity change from 0 to 512 [ 280.328697][ T7571] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 280.389811][ T7571] EXT4-fs (loop4): 1 truncate cleaned up [ 280.395578][ T7571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 280.610849][ T7576] device syzkaller0 entered promiscuous mode [ 281.147707][ T7587] loop3: detected capacity change from 0 to 128 [ 281.155091][ T7587] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.174417][ T7587] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 281.843260][ T56] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 283.355890][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 283.942703][ T7607] device syzkaller0 entered promiscuous mode [ 284.167849][ T4324] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 284.546814][ T7623] loop1: detected capacity change from 0 to 16 [ 284.555048][ T7623] erofs: Unknown parameter './cgroup.net/syz1' [ 285.255231][ T4324] usb 5-1: Using ep0 maxpacket: 8 [ 285.261080][ T4260] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.273877][ T4324] usb 5-1: config 12 has an invalid interface number: 188 but max is 0 [ 286.009610][ T4270] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 286.167034][ T4324] usb 5-1: config 12 has no interface number 0 [ 286.173945][ T4324] usb 5-1: config 12 interface 188 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 286.184438][ T4324] usb 5-1: config 12 interface 188 has no altsetting 0 [ 286.197428][ T4324] usb 5-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 286.206541][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.215480][ T4324] usb 5-1: Product: syz [ 286.219792][ T4324] usb 5-1: Manufacturer: syz [ 286.224429][ T4324] usb 5-1: SerialNumber: syz [ 286.231860][ T7606] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.274987][ T4270] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 286.297699][ T4270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.347473][ T4270] usb 1-1: Product: syz [ 286.357017][ T4270] usb 1-1: Manufacturer: syz [ 286.372137][ T4270] usb 1-1: SerialNumber: syz [ 286.408222][ T4270] usb 1-1: config 0 descriptor?? [ 286.449418][ T4324] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 286.457077][ T4324] usb 5-1: selecting invalid altsetting 0 [ 286.473546][ T2309] pvrusb2: control-write URB failure, status=-71 [ 286.484151][ T7647] device syzkaller0 entered promiscuous mode [ 286.493190][ T2309] pvrusb2: Device being rendered inoperable [ 286.509738][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 286.547566][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 286.624891][ T4270] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 287.519881][ T7651] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.707940][ T7659] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1039'. [ 287.782991][ T4324] usb 5-1: USB disconnect, device number 27 [ 287.941654][ T4270] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 288.154542][ T7675] 9pnet_fd: Insufficient options for proto=fd [ 288.296142][ T7677] loop3: detected capacity change from 0 to 16 [ 288.303422][ T7677] erofs: Unknown parameter './cgroup.net/syz1' [ 288.467339][ T7681] device syzkaller0 entered promiscuous mode [ 289.065242][ T4326] usb 1-1: USB disconnect, device number 25 [ 289.235997][ T4260] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.087636][ T4324] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 290.279248][ T4324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.307393][ T4324] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 290.316653][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.347162][ T4324] usb 5-1: config 0 descriptor?? [ 290.370158][ T4324] pwc: Askey VC010 type 2 USB webcam detected. [ 290.570171][ T4324] pwc: send_video_command error -71 [ 290.575478][ T4324] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 290.594763][ T4324] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 290.614244][ T4324] usb 5-1: USB disconnect, device number 28 [ 290.659340][ T7716] device syzkaller0 entered promiscuous mode [ 290.692229][ T7716] tipc: Enabled bearer , priority 0 [ 290.712172][ T7714] tipc: Resetting bearer [ 290.783271][ T7714] tipc: Disabling bearer [ 290.907396][ T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 290.936793][ T7719] device syzkaller0 entered promiscuous mode [ 291.100416][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 291.112767][ T26] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 291.133638][ T26] usb 3-1: config 0 has no interface number 0 [ 291.149567][ T26] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 291.176978][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.197415][ T4324] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 291.216415][ T26] usb 3-1: Product: syz [ 291.236509][ T26] usb 3-1: Manufacturer: syz [ 291.246642][ T26] usb 3-1: SerialNumber: syz [ 291.270082][ T26] usb 3-1: config 0 descriptor?? [ 291.285424][ T26] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 291.594784][ T7741] loop0: detected capacity change from 0 to 16 [ 291.603100][ T7741] erofs: Unknown parameter './cgroup.net/syz1' [ 292.271594][ T4324] usb 5-1: device descriptor read/all, error -71 [ 292.281450][ T26] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 292.293409][ T26] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 292.499638][ T7750] 9pnet_fd: Insufficient options for proto=fd [ 293.038662][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 293.049641][ T26] usb 3-1: USB disconnect, device number 11 [ 293.051329][ T4261] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.095359][ T7743] loop3: detected capacity change from 0 to 512 [ 293.104723][ T26] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 293.120141][ T26] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 293.132053][ T26] quatech2 3-1:0.51: device disconnected [ 293.156029][ T7743] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.292785][ T7743] EXT4-fs (loop3): 1 truncate cleaned up [ 293.333160][ T7743] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 293.740092][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1075'. [ 294.006346][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 294.326476][ T7801] device syzkaller0 entered promiscuous mode [ 294.546867][ T7811] device syzkaller0 entered promiscuous mode [ 295.218252][ T7836] device syzkaller0 entered promiscuous mode [ 295.725107][ T7852] loop4: detected capacity change from 0 to 16 [ 295.732310][ T7852] erofs: Unknown parameter './cgroup.net/syz1' [ 296.320388][ T7873] device syzkaller0 entered promiscuous mode [ 296.539733][ T7883] 9pnet_fd: Insufficient options for proto=fd [ 296.634769][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1105'. [ 296.988518][ T7890] loop0: detected capacity change from 0 to 16 [ 296.995585][ T7890] erofs: Unknown parameter './cgroup.net/syz1' [ 297.023483][ T7893] tipc: Enabled bearer , priority 0 [ 297.044915][ T4260] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.096691][ T7892] tipc: Disabling bearer [ 297.579943][ T7908] loop3: detected capacity change from 0 to 128 [ 297.589376][ T7908] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.618084][ T7908] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.697537][ T4326] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 297.872793][ T7915] 9pnet_fd: Insufficient options for proto=fd [ 297.899260][ T4326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.936731][ T4326] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 297.958767][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.986105][ T4326] usb 2-1: config 0 descriptor?? [ 298.015154][ T4326] pwc: Askey VC010 type 2 USB webcam detected. [ 298.026100][ T7918] device syzkaller0 entered promiscuous mode [ 298.214182][ T4326] pwc: send_video_command error -71 [ 298.225430][ T4326] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 298.233779][ T4326] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 298.250282][ T4326] usb 2-1: USB disconnect, device number 14 [ 298.288300][ T4336] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 298.656599][ T7929] tipc: Enabled bearer , priority 0 [ 298.694911][ T7928] tipc: Disabling bearer [ 298.716184][ T7930] device syzkaller0 entered promiscuous mode [ 298.827392][ T4326] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 298.890774][ T7935] device syzkaller0 entered promiscuous mode [ 299.049297][ T4326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.087432][ T4326] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.096652][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.138261][ T4326] usb 2-1: config 0 descriptor?? [ 299.146402][ T4326] pwc: Askey VC010 type 2 USB webcam detected. [ 299.547570][ T4326] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.584729][ T4326] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.692706][ T4326] pwc: recv_control_msg error -32 req 02 val 2c00 [ 299.885417][ T4326] pwc: recv_control_msg error -32 req 04 val 1000 [ 300.043865][ T4326] pwc: recv_control_msg error -32 req 04 val 1300 [ 300.201117][ T4326] pwc: recv_control_msg error -32 req 04 val 1400 [ 300.288535][ T7951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 300.393554][ T4326] pwc: recv_control_msg error -32 req 02 val 2000 [ 300.438302][ T4326] pwc: recv_control_msg error -32 req 02 val 2100 [ 300.476177][ T4326] pwc: recv_control_msg error -32 req 04 val 1500 [ 300.512993][ T4326] pwc: recv_control_msg error -32 req 02 val 2500 [ 300.558268][ T4326] pwc: recv_control_msg error -32 req 02 val 2400 [ 300.583964][ T4326] pwc: recv_control_msg error -32 req 02 val 2600 [ 300.607325][ T4326] pwc: recv_control_msg error -32 req 02 val 2900 [ 300.656419][ T4326] pwc: recv_control_msg error -32 req 02 val 2800 [ 300.667178][ T7962] tipc: Enabled bearer , priority 0 [ 300.686109][ T7962] device syzkaller0 entered promiscuous mode [ 300.747891][ T7962] tipc: Resetting bearer [ 300.791666][ T7961] tipc: Resetting bearer [ 300.887202][ T4326] pwc: recv_control_msg error -71 req 04 val 1200 [ 300.896420][ T7961] tipc: Disabling bearer [ 300.908563][ T4326] pwc: Registered as video103. [ 300.918932][ T4326] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 300.952521][ T4326] usb 2-1: USB disconnect, device number 15 [ 301.066087][ T7977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.138612][ T7977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.219416][ T7977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.245832][ T7977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.294388][ T7979] device syzkaller0 entered promiscuous mode [ 301.344404][ T7983] 9pnet_fd: Insufficient options for proto=fd [ 302.219410][ T8007] tipc: Enabled bearer , priority 0 [ 302.238098][ T8007] device syzkaller0 entered promiscuous mode [ 302.277785][ T8007] tipc: Resetting bearer [ 302.295336][ T8006] tipc: Resetting bearer [ 302.331839][ T8006] tipc: Disabling bearer [ 302.496620][ T8010] loop0: detected capacity change from 0 to 512 [ 302.516415][ T8010] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 302.643767][ T8011] device syzkaller0 entered promiscuous mode [ 302.661542][ T8010] EXT4-fs (loop0): 1 truncate cleaned up [ 302.667694][ T8010] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 303.066374][ T8018] 9pnet_fd: Insufficient options for proto=fd [ 303.677456][ T4326] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 303.869267][ T4326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.917808][ T4326] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 303.937046][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.996813][ T4326] usb 3-1: config 0 descriptor?? [ 304.041722][ T4326] pwc: Askey VC010 type 2 USB webcam detected. [ 304.154234][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 304.232906][ T4326] pwc: send_video_command error -71 [ 304.238919][ T4326] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 304.246510][ T4326] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 304.317644][ T4326] usb 3-1: USB disconnect, device number 12 [ 304.366008][ T8041] IPVS: set_ctl: invalid protocol: 136 172.30.0.1:20005 [ 304.658452][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.867542][ T4326] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 304.917435][ T26] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 305.069159][ T4326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.079984][ T4326] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 305.089296][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.105377][ T4326] usb 3-1: config 0 descriptor?? [ 305.107840][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 305.124818][ T4326] pwc: Askey VC010 type 2 USB webcam detected. [ 305.142068][ T26] usb 2-1: config 12 has an invalid interface number: 188 but max is 1 [ 305.153106][ T26] usb 2-1: config 12 has no interface number 0 [ 305.166842][ T26] usb 2-1: config 12 interface 188 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 305.194397][ T26] usb 2-1: config 12 interface 1 has no altsetting 0 [ 305.210858][ T26] usb 2-1: config 12 interface 188 has no altsetting 0 [ 305.234536][ T26] usb 2-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 305.248534][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.276907][ T26] usb 2-1: Product: syz [ 305.287005][ T26] usb 2-1: Manufacturer: syz [ 305.295785][ T26] usb 2-1: SerialNumber: syz [ 305.374201][ T8061] device syzkaller0 entered promiscuous mode [ 305.386890][ T8061] tipc: Enabled bearer , priority 0 [ 305.410572][ T8060] tipc: Resetting bearer [ 305.474400][ T8060] tipc: Disabling bearer [ 305.515302][ T26] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 305.523751][ T4326] pwc: recv_control_msg error -32 req 02 val 2b00 [ 305.531955][ T26] usb 2-1: selecting invalid altsetting 0 [ 305.541675][ T2309] pvrusb2: control-write URB failure, status=-71 [ 305.549129][ T4326] pwc: recv_control_msg error -32 req 02 val 2700 [ 305.555837][ T2309] pvrusb2: Device being rendered inoperable [ 305.564784][ T4326] pwc: recv_control_msg error -32 req 02 val 2c00 [ 305.581827][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 305.592568][ T4326] pwc: recv_control_msg error -32 req 04 val 1000 [ 305.613734][ T4326] pwc: recv_control_msg error -32 req 04 val 1300 [ 305.622812][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 305.635179][ T4326] pwc: recv_control_msg error -32 req 04 val 1400 [ 305.657167][ T4326] pwc: recv_control_msg error -32 req 02 val 2000 [ 305.677917][ T4326] pwc: recv_control_msg error -32 req 02 val 2100 [ 305.695441][ T4326] pwc: recv_control_msg error -32 req 04 val 1500 [ 305.721829][ T4326] pwc: recv_control_msg error -32 req 02 val 2500 [ 305.731758][ T26] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 305.739642][ T4326] pwc: recv_control_msg error -32 req 02 val 2400 [ 305.755233][ T26] usb 2-1: selecting invalid altsetting 0 [ 305.774952][ T26] usb 2-1: USB disconnect, device number 16 [ 305.777444][ T2309] pvrusb2: control-write URB failure, status=-71 [ 305.798608][ T4326] pwc: recv_control_msg error -32 req 02 val 2600 [ 305.805594][ T2309] pvrusb2: Device being rendered inoperable [ 305.822839][ T4326] pwc: recv_control_msg error -32 req 02 val 2900 [ 305.838469][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 305.854829][ T4326] pwc: recv_control_msg error -32 req 02 val 2800 [ 305.862672][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 306.085820][ T4326] pwc: recv_control_msg error -71 req 04 val 1200 [ 306.104244][ T4326] pwc: Registered as video103. [ 306.124626][ T4326] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 306.216745][ T4326] usb 3-1: USB disconnect, device number 13 [ 306.272103][ T8080] tipc: Enabled bearer , priority 0 [ 306.322275][ T8080] device syzkaller0 entered promiscuous mode [ 306.392977][ T8080] tipc: Resetting bearer [ 306.438493][ T8079] tipc: Resetting bearer [ 306.466779][ T8079] tipc: Disabling bearer [ 306.803394][ T8094] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1180'. [ 307.072747][ T8102] tipc: Enabled bearer , priority 0 [ 307.099192][ T8100] device syzkaller0 entered promiscuous mode [ 307.114233][ T8105] gre0 speed is unknown, defaulting to 1000 [ 307.123333][ T8100] tipc: Enabled bearer , priority 0 [ 307.139809][ T8102] device syzkaller0 entered promiscuous mode [ 307.155592][ T8105] gre0 speed is unknown, defaulting to 1000 [ 307.167033][ T8099] tipc: Resetting bearer [ 307.236253][ T8099] tipc: Disabling bearer [ 307.264854][ T8105] gre0 speed is unknown, defaulting to 1000 [ 307.297634][ T8102] tipc: Resetting bearer [ 307.349353][ T8101] tipc: Resetting bearer [ 307.476127][ T8101] tipc: Disabling bearer [ 307.552643][ T26] gre0 speed is unknown, defaulting to 1000 [ 307.567857][ T8105] infiniband syz1: set active [ 307.572952][ T8105] infiniband syz1: added gre0 [ 307.764757][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 307.818954][ T8105] RDS/IB: syz1: added [ 307.823953][ T8105] smc: adding ib device syz1 with port count 1 [ 307.846522][ T8105] smc: ib device syz1 port 1 has pnetid [ 307.886819][ T4326] gre0 speed is unknown, defaulting to 1000 [ 307.943862][ T8105] gre0 speed is unknown, defaulting to 1000 [ 308.042089][ T8127] tipc: Enabled bearer , priority 0 [ 308.068338][ T8127] device syzkaller0 entered promiscuous mode [ 308.162392][ T8127] tipc: Resetting bearer [ 308.182020][ T8126] tipc: Resetting bearer [ 308.236759][ T8126] tipc: Disabling bearer [ 308.417119][ T8105] gre0 speed is unknown, defaulting to 1000 [ 308.732104][ T8105] gre0 speed is unknown, defaulting to 1000 [ 308.986781][ T8134] gre0 speed is unknown, defaulting to 1000 [ 309.105298][ T8143] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1194'. [ 309.289431][ T8105] gre0 speed is unknown, defaulting to 1000 [ 309.780889][ T8105] gre0 speed is unknown, defaulting to 1000 [ 309.922206][ T8160] device syzkaller0 entered promiscuous mode [ 310.643973][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'. [ 310.663184][ T8175] netlink: 58 bytes leftover after parsing attributes in process `syz.4.1204'. [ 310.879633][ T8175] team0 (unregistering): Port device team_slave_0 removed [ 310.930460][ T8175] team0 (unregistering): Port device team_slave_1 removed [ 311.477389][ T4324] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 311.684826][ T4324] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 311.717404][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.726167][ T4324] usb 1-1: Product: syz [ 311.737437][ T4324] usb 1-1: Manufacturer: syz [ 311.742119][ T4324] usb 1-1: SerialNumber: syz [ 311.791006][ T4324] usb 1-1: config 0 descriptor?? [ 312.029770][ T4324] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 312.103311][ T8190] gre0 speed is unknown, defaulting to 1000 [ 312.222329][ T8194] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1210'. [ 312.475508][ T8196] tipc: Enabled bearer , priority 0 [ 312.590500][ T8197] tipc: Resetting bearer [ 312.643543][ T4324] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 312.668768][ T8195] tipc: Disabling bearer [ 314.308148][ T26] usb 1-1: USB disconnect, device number 26 [ 314.677378][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1224'. [ 314.686551][ T8240] netlink: 58 bytes leftover after parsing attributes in process `syz.2.1224'. [ 314.817452][ T8240] team0 (unregistering): Port device team_slave_0 removed [ 314.861551][ T8240] team0 (unregistering): Port device team_slave_1 removed [ 315.180990][ T8244] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.1225'. [ 315.634045][ T8256] gre0 speed is unknown, defaulting to 1000 [ 316.039843][ T8263] device syzkaller0 entered promiscuous mode [ 316.218271][ T8184] Set syz1 is full, maxelem 65536 reached [ 316.757533][ T4324] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 316.947426][ T4324] usb 4-1: Using ep0 maxpacket: 8 [ 316.955533][ T4324] usb 4-1: config 12 has an invalid interface number: 188 but max is 1 [ 317.004695][ T4324] usb 4-1: config 12 has no interface number 0 [ 317.024933][ T4324] usb 4-1: config 12 interface 1 altsetting 2 endpoint 0x88 has an invalid bInterval 247, changing to 11 [ 317.097421][ T4324] usb 4-1: config 12 interface 188 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 317.128193][ T4324] usb 4-1: config 12 interface 1 has no altsetting 0 [ 317.134980][ T4324] usb 4-1: config 12 interface 188 has no altsetting 0 [ 317.162073][ T4324] usb 4-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 317.187530][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.218660][ T4324] usb 4-1: Product: syz [ 317.233107][ T4324] usb 4-1: Manufacturer: syz [ 317.244069][ T4324] usb 4-1: SerialNumber: syz [ 317.459487][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.465882][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.486290][ T4324] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 317.494625][ T4324] usb 4-1: selecting invalid altsetting 0 [ 317.504307][ T2309] pvrusb2: control-write URB failure, status=-71 [ 317.515414][ T2309] pvrusb2: Device being rendered inoperable [ 317.557428][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 317.596133][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 317.694039][ T4324] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 317.721229][ T4324] usb 4-1: selecting invalid altsetting 0 [ 317.727952][ T2309] pvrusb2: control-write URB failure, status=-71 [ 317.735051][ T2309] pvrusb2: Device being rendered inoperable [ 317.767509][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 317.784474][ T4324] usb 4-1: USB disconnect, device number 12 [ 317.845694][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 318.042857][ T8303] gre0 speed is unknown, defaulting to 1000 [ 318.442004][ T8310] 9pnet_fd: Insufficient options for proto=fd [ 318.818103][ T8324] loop4: detected capacity change from 0 to 512 [ 318.832298][ T8324] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 318.907655][ T8324] EXT4-fs (loop4): 1 truncate cleaned up [ 318.913514][ T8324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 320.077106][ T8350] loop2: detected capacity change from 0 to 128 [ 320.089198][ T8350] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 320.211382][ T8350] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.642001][ T4326] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 321.837394][ T4326] usb 2-1: Using ep0 maxpacket: 8 [ 321.845693][ T4326] usb 2-1: config 12 has an invalid interface number: 188 but max is 1 [ 321.894259][ T4326] usb 2-1: config 12 has no interface number 0 [ 321.910901][ T4326] usb 2-1: config 12 interface 1 altsetting 2 endpoint 0x88 has an invalid bInterval 247, changing to 11 [ 321.957592][ T4326] usb 2-1: config 12 interface 188 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 322.002963][ T4326] usb 2-1: config 12 interface 1 has no altsetting 0 [ 322.033387][ T4326] usb 2-1: config 12 interface 188 has no altsetting 0 [ 322.066103][ T4326] usb 2-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 322.096120][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.119814][ T4326] usb 2-1: Product: syz [ 322.144461][ T4326] usb 2-1: Manufacturer: syz [ 322.154573][ T4326] usb 2-1: SerialNumber: syz [ 322.182861][ T4298] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 322.386873][ T4326] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 322.428300][ T4326] usb 2-1: selecting invalid altsetting 0 [ 322.434377][ T2309] pvrusb2: control-write URB failure, status=-71 [ 322.447637][ T2309] pvrusb2: Device being rendered inoperable [ 322.496394][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 322.517140][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 322.583151][ T8371] tipc: Enabled bearer , priority 0 [ 322.594654][ T4326] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 322.606536][ T4326] usb 2-1: selecting invalid altsetting 0 [ 322.623252][ T2309] pvrusb2: control-write URB failure, status=-71 [ 322.632528][ T8370] tipc: Disabling bearer [ 322.640843][ T2309] pvrusb2: Device being rendered inoperable [ 322.664967][ T4326] usb 2-1: USB disconnect, device number 17 [ 322.671004][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 322.691487][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 323.751491][ T8403] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 324.100494][ T8413] infiniband syz1: set down [ 324.623899][ T8412] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1274'. [ 324.700281][ T8415] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (129) [ 324.726983][ T4326] gre0 speed is unknown, defaulting to 1000 [ 324.758787][ T4320] gre0 speed is unknown, defaulting to 1000 [ 324.831383][ T8427] Bluetooth: MGMT ver 1.22 [ 325.043824][ T8433] tipc: Enabled bearer , priority 0 [ 325.080084][ T8433] device syzkaller0 entered promiscuous mode [ 325.127977][ T8433] tipc: Resetting bearer [ 325.146004][ T8432] tipc: Resetting bearer [ 325.238049][ T8432] tipc: Disabling bearer [ 325.590913][ T8456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1284'. [ 325.642308][ T8456] device batadv_slave_0 entered promiscuous mode [ 325.926807][ T8462] 9pnet_fd: Insufficient options for proto=fd [ 326.124997][ T8467] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1287'. [ 326.221927][ T8469] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (129) [ 326.511936][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 326.635931][ T8481] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1293'. [ 326.757399][ T126] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 326.956592][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.989478][ T126] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 327.021073][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.068732][ T126] usb 1-1: config 0 descriptor?? [ 327.103963][ T126] pwc: Askey VC010 type 2 USB webcam detected. [ 327.302103][ T126] pwc: send_video_command error -71 [ 327.310027][ T126] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 327.331906][ T126] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 327.341311][ T126] usb 1-1: USB disconnect, device number 27 [ 327.489712][ T8505] 9pnet_fd: Insufficient options for proto=fd [ 327.833047][ T4323] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 327.911731][ T126] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 327.953522][ T8523] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1305'. [ 328.017565][ T4323] usb 3-1: Using ep0 maxpacket: 8 [ 328.036085][ T4323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 328.055731][ T4323] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 328.084733][ T4323] usb 3-1: can't read configurations, error -71 [ 328.099959][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.115913][ T126] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 328.126025][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.141166][ T126] usb 1-1: config 0 descriptor?? [ 328.155495][ T126] pwc: Askey VC010 type 2 USB webcam detected. [ 328.554063][ T126] pwc: recv_control_msg error -32 req 02 val 2b00 [ 328.567980][ T126] pwc: recv_control_msg error -32 req 02 val 2700 [ 328.595645][ T126] pwc: recv_control_msg error -32 req 02 val 2c00 [ 328.607451][ T126] pwc: recv_control_msg error -32 req 04 val 1000 [ 328.645274][ T126] pwc: recv_control_msg error -32 req 04 val 1300 [ 328.685485][ T126] pwc: recv_control_msg error -32 req 04 val 1400 [ 328.713311][ T126] pwc: recv_control_msg error -32 req 02 val 2000 [ 328.746650][ T126] pwc: recv_control_msg error -32 req 02 val 2100 [ 328.767437][ T126] pwc: recv_control_msg error -32 req 04 val 1500 [ 328.876238][ T126] pwc: recv_control_msg error -32 req 02 val 2500 [ 328.924762][ T126] pwc: recv_control_msg error -32 req 02 val 2400 [ 328.976651][ T126] pwc: recv_control_msg error -32 req 02 val 2600 [ 329.014321][ T126] pwc: recv_control_msg error -32 req 02 val 2900 [ 329.098738][ T8543] loop1: detected capacity change from 0 to 16 [ 329.108879][ T8543] erofs: Unknown parameter './cgroup.net/syz1' [ 330.334528][ T8552] tipc: Enabling of bearer rejected, failed to enable media [ 330.727671][ T126] pwc: recv_control_msg error -71 req 02 val 2800 [ 330.747347][ T126] pwc: recv_control_msg error -71 req 04 val 1100 [ 330.754198][ T126] pwc: recv_control_msg error -71 req 04 val 1200 [ 330.763824][ T126] pwc: Registered as video103. [ 331.045621][ T126] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 331.097570][ T126] usb 1-1: USB disconnect, device number 28 [ 331.415016][ T8573] device syzkaller0 entered promiscuous mode [ 331.512909][ T8578] 9pnet_fd: Insufficient options for proto=fd [ 331.877857][ T8591] tipc: Enabled bearer , priority 0 [ 331.917069][ T8591] device syzkaller0 entered promiscuous mode [ 331.946578][ T8596] device syzkaller0 entered promiscuous mode [ 332.038735][ T8591] tipc: Resetting bearer [ 332.068321][ T8589] tipc: Resetting bearer [ 332.094649][ T8589] tipc: Disabling bearer [ 333.537536][ T8618] tipc: Enabling of bearer rejected, failed to enable media [ 333.859486][ T8641] 9pnet_fd: Insufficient options for proto=fd [ 333.982057][ T8646] team0 (unregistering): Port device team_slave_1 removed [ 334.734466][ T8609] Set syz1 is full, maxelem 65536 reached [ 336.409476][ T8653] device syzkaller0 entered promiscuous mode [ 336.996405][ T8702] netlink: 'syz.4.1348': attribute type 12 has an invalid length. [ 337.007484][ T26] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 337.135200][ T8705] gre0 speed is unknown, defaulting to 1000 [ 337.202025][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 337.211403][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 337.225727][ T26] usb 1-1: config 12 has an invalid interface number: 188 but max is 1 [ 337.235809][ T26] usb 1-1: config 12 has no interface number 0 [ 337.248669][ T26] usb 1-1: config 12 interface 1 altsetting 2 endpoint 0x88 has an invalid bInterval 247, changing to 11 [ 337.263968][ T26] usb 1-1: config 12 interface 188 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 337.276762][ T26] usb 1-1: config 12 interface 1 has no altsetting 0 [ 337.289898][ T26] usb 1-1: config 12 interface 188 has no altsetting 0 [ 337.320712][ T26] usb 1-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 337.342963][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.357947][ T26] usb 1-1: Product: syz [ 337.362566][ T26] usb 1-1: Manufacturer: syz [ 337.367223][ T26] usb 1-1: SerialNumber: syz [ 337.421403][ T8709] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1350'. [ 337.618536][ T26] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 337.635790][ T26] usb 1-1: selecting invalid altsetting 0 [ 337.644039][ T2309] pvrusb2: control-write URB failure, status=-71 [ 337.676027][ T2309] pvrusb2: Device being rendered inoperable [ 337.696750][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 337.722360][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 337.803767][ T26] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 337.835314][ T26] usb 1-1: selecting invalid altsetting 0 [ 337.871992][ T2309] pvrusb2: control-write URB failure, status=-71 [ 337.881489][ T2309] pvrusb2: Device being rendered inoperable [ 337.905063][ T26] usb 1-1: USB disconnect, device number 29 [ 337.934207][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 338.002908][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 338.037492][ T8719] netlink: 'syz.1.1354': attribute type 27 has an invalid length. [ 338.082571][ T8723] device syzkaller0 entered promiscuous mode [ 338.136063][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.146410][ T8719] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.163671][ T8719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.017901][ T8741] loop3: detected capacity change from 0 to 128 [ 339.029657][ T8741] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 339.061236][ T8741] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 342.310791][ T8749] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.1360'. [ 342.605771][ T8760] gre0 speed is unknown, defaulting to 1000 [ 342.747106][ T8772] tipc: Enabling of bearer rejected, failed to enable media [ 343.329155][ T8789] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1369'. [ 343.549982][ T8792] loop3: detected capacity change from 0 to 128 [ 343.561407][ T8792] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 344.723153][ T8794] netlink: 'syz.0.1370': attribute type 27 has an invalid length. [ 344.752888][ T8792] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 345.248467][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.399553][ T8795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.490958][ T8795] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.575085][ T8795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.325469][ T8815] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.1375'. [ 346.702622][ T8829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.779341][ T8829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.855629][ T8829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.883514][ T8829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.054203][ T8832] device syzkaller0 entered promiscuous mode [ 347.559460][ T8845] loop0: detected capacity change from 0 to 128 [ 347.571876][ T8845] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.629416][ T8845] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.465580][ T56] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.858706][ T8866] netlink: 'syz.0.1389': attribute type 2 has an invalid length. [ 350.866520][ T8866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1389'. [ 350.875887][ T8840] gre0 speed is unknown, defaulting to 1000 [ 351.087197][ T8873] netlink: 'syz.3.1390': attribute type 27 has an invalid length. [ 351.111069][ T8873] device batadv_slave_0 left promiscuous mode [ 351.258816][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 351.297080][ T8873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.396539][ T8873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.621665][ T8894] tipc: Enabling of bearer rejected, failed to enable media [ 351.671537][ T8892] gre0 speed is unknown, defaulting to 1000 [ 351.697893][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.796469][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.899111][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.925440][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.128039][ C0] hrtimer: interrupt took 1297964 ns [ 352.445024][ T8921] xt_bpf: check failed: parse error [ 353.493467][ T8943] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (129) [ 354.441502][ T8959] gre0 speed is unknown, defaulting to 1000 [ 354.476571][ T8965] tipc: Enabling of bearer rejected, failed to enable media [ 354.526837][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.642316][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.801799][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.863320][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.998912][ T8996] device syzkaller0 entered promiscuous mode [ 356.403753][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 356.587151][ T9014] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.1422'. [ 357.044315][ T9023] tipc: Enabling of bearer rejected, failed to enable media [ 357.402278][ T9035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.557656][ T9035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.570291][ T9037] tipc: Enabled bearer , priority 0 [ 357.588288][ T9037] device syzkaller0 entered promiscuous mode [ 357.717742][ T9035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.762387][ T9033] tipc: Resetting bearer [ 357.923071][ T9033] tipc: Disabling bearer [ 359.034053][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'. [ 359.454256][ T9078] device syzkaller0 entered promiscuous mode [ 359.604681][ T9082] device syzkaller0 entered promiscuous mode [ 363.007764][ T9096] tipc: Enabling of bearer rejected, failed to enable media [ 364.271510][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1459'. [ 364.309992][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 364.746141][ T9163] device syzkaller0 entered promiscuous mode [ 368.986923][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 369.065118][ T9214] 8021q: VLANs not supported on caif0 [ 369.304753][ T9224] netlink: 'syz.1.1481': attribute type 2 has an invalid length. [ 369.346416][ T9224] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1481'. [ 370.635709][ T9253] netlink: 'syz.0.1487': attribute type 2 has an invalid length. [ 370.644883][ T9253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1487'. [ 371.427145][ T9264] device syzkaller0 entered promiscuous mode [ 375.114204][ T9299] Set syz1 is full, maxelem 65536 reached [ 376.221508][ T9288] tipc: Enabled bearer , priority 0 [ 376.230646][ T9292] device syzkaller0 entered promiscuous mode [ 376.251368][ T9310] netlink: 'syz.1.1500': attribute type 2 has an invalid length. [ 376.277791][ T9310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1500'. [ 376.517901][ T9288] tipc: Resetting bearer [ 376.629335][ T9288] tipc: Disabling bearer [ 376.940502][ T9340] gre0 speed is unknown, defaulting to 1000 [ 377.334033][ T9359] device syzkaller0 entered promiscuous mode [ 377.359931][ T9358] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.718575][ T9381] tipc: Enabling of bearer rejected, failed to enable media [ 378.902344][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.910078][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.989810][ T9420] device syzkaller0 entered promiscuous mode [ 382.967832][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 384.561783][ T9449] tipc: Enabling of bearer rejected, failed to enable media [ 384.609165][ T9447] netlink: 'syz.1.1531': attribute type 27 has an invalid length. [ 387.936063][ T9451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 388.003378][ T9451] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.038012][ T9451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.397886][ T9495] tipc: Enabled bearer , priority 0 [ 389.534244][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 390.135418][ T9496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.363431][ T9501] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 390.493362][ T9498] tipc: Resetting bearer [ 390.670516][ T9488] tipc: Disabling bearer [ 390.861686][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 390.929091][ T4321] tipc: Node number set to 4178225928 [ 392.447607][ T4321] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 392.640510][ T4321] usb 5-1: device descriptor read/64, error -71 [ 392.738235][ T9527] netlink: 'syz.2.1547': attribute type 27 has an invalid length. [ 392.907911][ T9527] infiniband syz1: set active [ 392.927988][ T4321] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 393.007719][ T9527] infiniband syz1: set active [ 393.097571][ T4321] usb 5-1: device descriptor read/64, error -71 [ 393.218160][ T4321] usb usb5-port1: attempt power cycle [ 393.627574][ T4321] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 393.689416][ T4321] usb 5-1: device descriptor read/8, error -71 [ 393.883541][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 393.958255][ T4321] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 394.029228][ T4321] usb 5-1: device descriptor read/8, error -71 [ 394.208206][ T4321] usb usb5-port1: unable to enumerate USB device [ 394.228762][ T9527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.630083][ T9527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.792259][ T4323] gre0 speed is unknown, defaulting to 1000 [ 394.973332][ T4342] gre0 speed is unknown, defaulting to 1000 [ 395.711691][ T9548] team0 (unregistering): Port device team_slave_0 removed [ 395.823692][ T9548] team0 (unregistering): Port device team_slave_1 removed [ 396.087905][ T126] gre0 speed is unknown, defaulting to 1000 [ 397.028513][ T9564] tipc: Enabled bearer , priority 0 [ 397.115284][ T9564] tipc: Resetting bearer [ 397.299930][ T9563] tipc: Disabling bearer [ 397.920876][ T9571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1558'. [ 398.067747][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'. [ 399.858143][ T4342] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 400.057515][ T4342] usb 2-1: device descriptor read/64, error -71 [ 400.327530][ T4342] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 400.517913][ T4342] usb 2-1: device descriptor read/64, error -71 [ 400.659108][ T4342] usb usb2-port1: attempt power cycle [ 401.067620][ T4342] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 401.120539][ T4342] usb 2-1: device descriptor read/8, error -71 [ 401.418176][ T4342] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 401.479587][ T4342] usb 2-1: device descriptor read/8, error -71 [ 401.607911][ T4342] usb usb2-port1: unable to enumerate USB device [ 403.208050][ T9602] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1568'. [ 404.048867][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 410.449111][ T9659] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1585'. [ 413.331443][ T9674] device syzkaller0 entered promiscuous mode [ 413.813436][ T4272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.825896][ T4272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.835552][ T4272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.847753][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.856939][ T4272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 413.866406][ T4272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.937812][ T4272] Bluetooth: hci5: command 0x0409 tx timeout [ 418.022259][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 420.097811][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 422.177980][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 422.347698][ T9680] gre0 speed is unknown, defaulting to 1000 [ 422.600544][ T9715] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1596'. [ 424.716831][ T4298] tipc: Left network mode [ 426.180293][ T9745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1604'. [ 426.208607][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 426.885251][ T9748] device syzkaller0 entered promiscuous mode [ 433.198649][ T9754] gre0 speed is unknown, defaulting to 1000 [ 433.564097][ T9773] device syzkaller0 entered promiscuous mode [ 437.997447][ T4298] infiniband syz1: set down [ 438.175408][ T4331] smc: removing ib device syz1 [ 438.222733][ T126] gre0 speed is unknown, defaulting to 1000 [ 439.718236][ T9680] chnl_net:caif_netlink_parms(): no params data found [ 440.103537][ T9820] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1617'. [ 440.218228][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1617'. [ 440.346819][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.354610][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.668697][ T9680] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.738235][ T9680] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.856012][ T9680] device bridge_slave_0 entered promiscuous mode [ 443.069257][ T9680] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.103926][ T9680] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.223371][ T9680] device bridge_slave_1 entered promiscuous mode [ 444.058263][ T9680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.813002][ T9853] device syzkaller0 entered promiscuous mode [ 444.926348][ T9680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.120661][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1624'. [ 446.458918][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.475740][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.492918][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.509312][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.525118][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 446.540101][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 448.578317][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 450.667770][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 451.626065][ T9868] device syzkaller0 entered promiscuous mode [ 452.028237][ T9680] team0: Port device team_slave_0 added [ 452.417211][ T9680] team0: Port device team_slave_1 added [ 452.745015][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 453.127340][ T9899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1629'. [ 453.174789][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 453.399095][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.446910][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.559724][ T9680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.651613][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1630'. [ 454.149608][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.231552][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.466318][ T9680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.827729][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 454.915475][ T4298] device hsr_slave_0 left promiscuous mode [ 454.990196][ T4298] device hsr_slave_1 left promiscuous mode [ 455.053147][ T4298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.158268][ T4298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.269518][ T4298] device bridge_slave_1 left promiscuous mode [ 455.332522][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.424908][ T4298] device bridge_slave_0 left promiscuous mode [ 455.485290][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.346266][ T4298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.420414][ T4298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.934464][ T4298] bond0 (unregistering): Released all slaves [ 459.202878][ T9923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1635'. [ 459.308920][ T9680] device hsr_slave_0 entered promiscuous mode [ 459.389822][ T9680] device hsr_slave_1 entered promiscuous mode [ 459.467850][ T9680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.505008][ T9680] Cannot create hsr debugfs directory [ 460.613356][ T9961] device syzkaller0 entered promiscuous mode [ 461.891371][ T9870] chnl_net:caif_netlink_parms(): no params data found [ 462.939682][ T9951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.597620][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.635926][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.716441][ T9870] device bridge_slave_0 entered promiscuous mode [ 463.806164][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.927737][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.051346][ T9870] device bridge_slave_1 entered promiscuous mode [ 464.203855][ T9680] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 464.594096][ T9680] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 464.671035][ T9986] tipc: Enabled bearer , priority 0 [ 465.424850][ T9680] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 465.630845][ T9985] tipc: Disabling bearer [ 465.927009][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.055269][ T9680] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 466.167035][ T14] tipc: Node number set to 931746847 [ 466.193777][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.903486][ T9870] team0: Port device team_slave_0 added [ 467.030570][ T9870] team0: Port device team_slave_1 added [ 467.515318][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.628799][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.917658][ T9870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.240819][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.287324][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.518278][ T9870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.962100][ T4336] tipc: Left network mode [ 470.023196][ T9870] device hsr_slave_0 entered promiscuous mode [ 470.118453][ T9870] device hsr_slave_1 entered promiscuous mode [ 470.247761][ T9870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.258050][ T9870] Cannot create hsr debugfs directory [ 471.652768][ T4324] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 471.907538][ T4324] usb 2-1: Using ep0 maxpacket: 8 [ 471.933426][ T4324] usb 2-1: config 12 has an invalid interface number: 188 but max is 1 [ 471.970824][ T4324] usb 2-1: config 12 has no interface number 0 [ 472.007683][ T4324] usb 2-1: config 12 interface 1 altsetting 2 endpoint 0x88 has an invalid bInterval 247, changing to 11 [ 472.057621][ T4324] usb 2-1: config 12 interface 188 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 472.127450][ T4324] usb 2-1: config 12 interface 1 has no altsetting 0 [ 472.147351][ T4324] usb 2-1: config 12 interface 188 has no altsetting 0 [ 472.226646][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.240476][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.250237][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.267116][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 472.276689][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 472.286060][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.298248][ T4324] usb 2-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 472.309306][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.318728][ T4324] usb 2-1: Product: syz [ 472.323970][ T4324] usb 2-1: Manufacturer: syz [ 472.329874][ T4324] usb 2-1: SerialNumber: syz [ 472.582056][ T4324] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 472.630490][ T4324] usb 2-1: selecting invalid altsetting 0 [ 472.668998][ T2309] pvrusb2: control-write URB failure, status=-71 [ 472.676521][ T2309] pvrusb2: Device being rendered inoperable [ 472.685084][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 472.712811][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 472.780677][T10087] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (129) [ 472.806915][ T4324] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 472.836377][ T4324] usb 2-1: selecting invalid altsetting 0 [ 472.853621][ T2309] pvrusb2: control-write URB failure, status=-71 [ 472.864075][ T2309] pvrusb2: Device being rendered inoperable [ 472.897596][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 472.928032][ T4324] usb 2-1: USB disconnect, device number 22 [ 472.937011][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 473.041583][T10068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.171745][ T9870] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 474.410742][ T9870] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 474.426563][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 474.600007][ T4336] device hsr_slave_0 left promiscuous mode [ 474.722986][ T4336] device hsr_slave_1 left promiscuous mode [ 474.768081][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.831678][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.871169][ T4336] device bridge_slave_1 left promiscuous mode [ 474.919207][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.007396][ T4336] device bridge_slave_0 left promiscuous mode [ 475.015024][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.333575][T10110] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1665'. [ 475.475204][ T4336] bond1 (unregistering): (slave veth3): Releasing backup interface [ 476.499039][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 476.716068][ T4336] bond1 (unregistering): Released all slaves [ 477.862944][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 477.911293][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 477.960539][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.010273][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.353521][ T4336] bond0 (unregistering): Released all slaves [ 478.477129][ T9870] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 478.489427][ T9870] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 478.588376][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 479.021327][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.086057][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.110460][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.179601][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.245201][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.289256][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.327696][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.334936][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.383704][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.441442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.481357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.539609][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.546822][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.607368][T10083] chnl_net:caif_netlink_parms(): no params data found [ 479.680201][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.740391][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.788693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.813896][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.831240][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 479.845427][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 479.876939][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.893854][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 479.906256][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.922505][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.934180][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.983898][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.196863][T10083] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.212002][T10083] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.254160][T10083] device bridge_slave_0 entered promiscuous mode [ 480.366004][T10083] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.380236][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.419628][T10083] device bridge_slave_1 entered promiscuous mode [ 480.597626][T10083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.657485][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 480.678011][T10083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.885503][T10083] team0: Port device team_slave_0 added [ 480.953527][T10083] team0: Port device team_slave_1 added [ 481.102246][T10083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.153099][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.236306][T10083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.413134][T10083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.430672][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.478216][T10083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.596433][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.626852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.644843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.686619][T10083] device hsr_slave_0 entered promiscuous mode [ 481.707891][T10083] device hsr_slave_1 entered promiscuous mode [ 481.812586][T10137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.169743][T10195] tipc: Enabling of bearer rejected, failed to enable media [ 482.735750][ T4336] device hsr_slave_0 left promiscuous mode [ 482.777638][ T4336] device hsr_slave_1 left promiscuous mode [ 482.798629][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.855627][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.921478][ T4336] device bridge_slave_1 left promiscuous mode [ 482.982921][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.032930][ T4336] device bridge_slave_0 left promiscuous mode [ 483.084922][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.123418][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 484.173813][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 484.223312][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.274913][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.484146][ T4336] bond0 (unregistering): Released all slaves [ 485.450502][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.494005][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.646783][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.669086][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.723390][ T9870] device veth0_vlan entered promiscuous mode [ 485.773576][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 485.801561][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 485.851923][ T9870] device veth1_vlan entered promiscuous mode [ 485.964968][T10083] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 486.014456][T10083] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 486.062549][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 486.089484][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.150674][ T9870] device veth0_macvtap entered promiscuous mode [ 486.168301][T10083] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 486.194315][ T9870] device veth1_macvtap entered promiscuous mode [ 486.214814][T10083] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 486.301809][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.327861][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 486.345390][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 486.377372][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 486.416300][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 486.602645][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.627437][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 486.649630][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.474223][ T9870] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.483383][ T9870] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.492186][ T9870] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.501047][ T9870] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.553305][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'. [ 489.573994][T10291] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.582893][T10291] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.591814][T10291] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.600597][T10291] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.663021][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'. [ 489.699169][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'. [ 490.581168][T10083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.675535][ T9396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.704923][ T9396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.810395][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 490.908053][T10083] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.930788][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.018414][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.112427][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.136802][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.191008][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.199459][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.328583][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 491.348690][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.356597][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.410159][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.454140][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.502909][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.510120][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.597957][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 491.668264][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 491.729572][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.788688][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 491.835317][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.890426][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 491.966654][T10343] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.127705][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 492.138015][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 492.213102][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.281524][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.320164][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.362535][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.414958][T10083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.648883][T10353] device syzkaller0 entered promiscuous mode [ 492.711332][T10364] Bluetooth: MGMT ver 1.22 [ 492.792310][T10362] netlink: 'syz.3.1701': attribute type 12 has an invalid length. [ 498.001542][T10378] tipc: Enabling of bearer rejected, failed to enable media [ 498.859786][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.882713][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.966037][T10083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.993218][T10412] loop3: detected capacity change from 0 to 2048 [ 499.131641][T10412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 499.326850][T10425] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 499.394540][T10425] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 499.516525][T10427] device syzkaller0 entered promiscuous mode [ 499.567953][T10425] EXT4-fs (loop3): This should not happen!! Data will be lost [ 499.567953][T10425] [ 499.649477][T10425] EXT4-fs (loop3): Total free blocks count 0 [ 499.719801][T10425] EXT4-fs (loop3): Free/Dirty block details [ 499.769578][T10425] EXT4-fs (loop3): free_blocks=66060288 [ 499.775300][T10425] EXT4-fs (loop3): dirty_blocks=16 [ 499.829691][T10425] EXT4-fs (loop3): Block reservation details [ 499.836058][T10425] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 500.125433][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 500.442731][T10452] device bridge_slave_0 left promiscuous mode [ 500.486265][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.552322][T10457] loop1: detected capacity change from 0 to 256 [ 500.595708][T10452] device bridge_slave_1 left promiscuous mode [ 500.619522][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.683098][T10452] bond0: (slave bond_slave_0): Releasing backup interface [ 500.699787][T10452] bond0: (slave bond_slave_1): Releasing backup interface [ 500.724950][T10457] FAT-fs (loop1): Directory bread(block 64) failed [ 500.733010][T10452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.751805][T10457] FAT-fs (loop1): Directory bread(block 65) failed [ 500.779133][T10452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.786550][T10457] FAT-fs (loop1): Directory bread(block 66) failed [ 500.806860][T10457] FAT-fs (loop1): Directory bread(block 67) failed [ 500.817982][T10452] bond1: (slave macvlan1): Releasing backup interface [ 500.829916][T10457] FAT-fs (loop1): Directory bread(block 68) failed [ 500.847006][T10457] FAT-fs (loop1): Directory bread(block 69) failed [ 500.901624][T10457] FAT-fs (loop1): Directory bread(block 70) failed [ 500.970286][T10457] FAT-fs (loop1): Directory bread(block 71) failed [ 501.037796][T10457] FAT-fs (loop1): Directory bread(block 72) failed [ 501.044416][T10457] FAT-fs (loop1): Directory bread(block 73) failed [ 501.783492][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.789965][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.069097][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.104981][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.229778][T10487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.258150][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 502.279548][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.319883][T10083] device veth0_vlan entered promiscuous mode [ 502.344427][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.370365][T10487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.386370][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.419278][T10487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.441389][T10083] device veth1_vlan entered promiscuous mode [ 502.527554][T10493] device syzkaller0 entered promiscuous mode [ 502.590468][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.605443][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.779940][T10083] device veth0_macvtap entered promiscuous mode [ 502.851686][T10083] device veth1_macvtap entered promiscuous mode [ 502.925723][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.024592][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.062101][T10083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.148161][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.204036][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.264812][T10083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.336643][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 503.359105][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.404789][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 503.447128][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.486693][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 503.526670][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.575819][T10083] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.622422][T10083] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.665661][T10083] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.707128][T10083] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.026144][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.083348][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.148702][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 504.211969][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.228352][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.311142][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 505.415560][T10550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.555382][T10550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.685979][T10510] loop3: detected capacity change from 0 to 40427 [ 505.693793][T10550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.764059][T10554] device syzkaller0 entered promiscuous mode [ 505.781851][T10510] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 505.872732][T10510] F2FS-fs (loop3): invalid crc value [ 505.914251][T10558] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1744'. [ 505.928112][T10510] F2FS-fs (loop3): Found nat_bits in checkpoint [ 506.051913][T10558] device syzkaller0 entered promiscuous mode [ 506.141388][T10558] tc action pedit offset 48 out of bounds [ 506.147671][T10558] tc action pedit offset 48 out of bounds [ 506.153451][T10558] tc action pedit offset 48 out of bounds [ 506.159299][T10558] tc action pedit offset 48 out of bounds [ 506.165351][T10558] tc action pedit offset 48 out of bounds [ 506.171169][T10558] tc action pedit offset 48 out of bounds [ 506.176945][T10558] tc action pedit offset 48 out of bounds [ 506.182776][T10558] tc action pedit offset 48 out of bounds [ 506.188602][T10558] tc action pedit offset 48 out of bounds [ 506.194370][T10558] tc action pedit offset 48 out of bounds [ 506.200192][T10558] tc action pedit offset 48 out of bounds [ 506.205950][T10558] tc action pedit offset 48 out of bounds [ 506.211791][T10558] tc action pedit offset 48 out of bounds [ 506.217612][T10558] tc action pedit offset 48 out of bounds [ 506.223366][T10558] tc action pedit offset 48 out of bounds [ 506.229164][T10558] tc action pedit offset 48 out of bounds [ 506.234928][T10558] tc action pedit offset 48 out of bounds [ 506.240726][T10558] 0: reclassify loop, rule prio 0, protocol 800 [ 506.265009][T10510] F2FS-fs (loop3): Start checkpoint disabled! [ 507.176010][T10575] loop6: detected capacity change from 0 to 256 [ 508.500278][T10599] device syzkaller0 entered promiscuous mode [ 508.538284][T10597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.628561][T10597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.727828][T10604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.793024][T10597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.424919][T10618] process 'syz.1.1760' launched './file0' with NULL argv: empty string added [ 509.488785][T10619] loop1: detected capacity change from 0 to 256 [ 509.498021][T10619] exfat: Deprecated parameter 'utf8' [ 509.532632][T10619] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 512.361610][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.484363][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.527742][T10665] random: crng reseeded on system resumption [ 513.551585][T10667] loop3: detected capacity change from 0 to 40427 [ 513.574770][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.596920][T10667] F2FS-fs (loop3): invalid crc value [ 513.721912][T10669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.883321][T10667] F2FS-fs (loop3): Found nat_bits in checkpoint [ 513.948768][T10667] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 515.956553][T10694] device syzkaller0 entered promiscuous mode [ 515.992515][ T4278] syz-executor: attempt to access beyond end of device [ 515.992515][ T4278] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 516.608101][T10708] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1784'. [ 517.008323][T10719] loop4: detected capacity change from 0 to 512 [ 517.126512][T10719] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 517.273221][T10719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 517.329459][T10719] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 518.084408][T10746] loop1: detected capacity change from 0 to 256 [ 518.156086][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 518.349172][T10749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.653353][T10753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.848431][T10759] loop4: detected capacity change from 0 to 128 [ 518.858889][T10759] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 518.874598][T10759] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 519.337229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 519.557220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 519.567221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 519.577220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 519.587215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 519.597218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 519.607218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 519.617218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 519.627215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 519.637217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 521.485554][T10761] loop1: detected capacity change from 0 to 4096 [ 521.579862][T10761] EXT4-fs: Conflicting test_dummy_encryption options [ 522.136567][T10779] loop4: detected capacity change from 0 to 512 [ 523.935089][T10779] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 524.460664][T10785] netlink: 'syz.3.1797': attribute type 12 has an invalid length. [ 524.482463][T10779] [ 524.484844][T10779] ====================================================== [ 524.491876][T10779] WARNING: possible circular locking dependency detected [ 524.498951][T10779] syzkaller #0 Not tainted [ 524.503397][T10779] ------------------------------------------------------ [ 524.510453][T10779] syz.4.1796/10779 is trying to acquire lock: [ 524.516561][T10779] ffff888027caac18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2f40 [ 524.526738][T10779] [ 524.526738][T10779] but task is already holding lock: [ 524.534224][T10779] ffff888070ae28e8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 524.544093][T10779] [ 524.544093][T10779] which lock already depends on the new lock. [ 524.544093][T10779] [ 524.554611][T10779] [ 524.554611][T10779] the existing dependency chain (in reverse order) is: [ 524.563652][T10779] [ 524.563652][T10779] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 524.571241][T10779] down_write+0x36/0x60 [ 524.575959][T10779] ext4_destroy_inline_data+0x24/0xe0 [ 524.581880][T10779] ext4_writepages+0x670/0x2f40 [ 524.587278][T10779] do_writepages+0x3ba/0x640 [ 524.592410][T10779] filemap_fdatawrite_wbc+0x11e/0x180 [ 524.598329][T10779] file_write_and_wait_range+0x159/0x230 [ 524.604510][T10779] ext4_sync_file+0x23b/0xca0 [ 524.609740][T10779] ext4_buffered_write_iter+0x2f6/0x390 [ 524.615833][T10779] ext4_file_write_iter+0x1cf/0x1710 [ 524.621664][T10779] vfs_write+0x4b1/0xa30 [ 524.626481][T10779] __x64_sys_pwrite64+0x197/0x220 [ 524.632070][T10779] do_syscall_64+0x4c/0xa0 [ 524.637050][T10779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.643486][T10779] [ 524.643486][T10779] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 524.651934][T10779] __lock_acquire+0x2d07/0x7d10 [ 524.657335][T10779] lock_acquire+0x1bb/0x4a0 [ 524.662413][T10779] percpu_down_read+0x44/0x1a0 [ 524.667767][T10779] ext4_writepages+0x20f/0x2f40 [ 524.673172][T10779] do_writepages+0x3ba/0x640 [ 524.678305][T10779] __writeback_single_inode+0x156/0x1160 [ 524.684496][T10779] writeback_single_inode+0x3cb/0x8e0 [ 524.690419][T10779] write_inode_now+0x17f/0x210 [ 524.695732][T10779] iput+0x613/0x980 [ 524.700088][T10779] ext4_xattr_block_set+0x249a/0x32b0 [ 524.706010][T10779] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 524.712459][T10779] __ext4_expand_extra_isize+0x301/0x3e0 [ 524.718636][T10779] __ext4_mark_inode_dirty+0x47f/0x770 [ 524.724645][T10779] ext4_evict_inode+0xa7f/0x1110 [ 524.730133][T10779] evict+0x4c9/0x8d0 [ 524.734579][T10779] ext4_orphan_cleanup+0xbeb/0x1420 [ 524.740341][T10779] ext4_fill_super+0x6ee3/0x78c0 [ 524.745846][T10779] get_tree_bdev+0x3f1/0x610 [ 524.750986][T10779] vfs_get_tree+0x88/0x270 [ 524.756034][T10779] do_new_mount+0x24a/0xa40 [ 524.761086][T10779] __se_sys_mount+0x2e3/0x3d0 [ 524.766309][T10779] do_syscall_64+0x4c/0xa0 [ 524.771273][T10779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.777738][T10779] [ 524.777738][T10779] other info that might help us debug this: [ 524.777738][T10779] [ 524.787982][T10779] Possible unsafe locking scenario: [ 524.787982][T10779] [ 524.795442][T10779] CPU0 CPU1 [ 524.800832][T10779] ---- ---- [ 524.806212][T10779] lock(&ei->xattr_sem); [ 524.810578][T10779] lock(&sbi->s_writepages_rwsem); [ 524.818313][T10779] lock(&ei->xattr_sem); [ 524.825182][T10779] lock(&sbi->s_writepages_rwsem); [ 524.830429][T10779] [ 524.830429][T10779] *** DEADLOCK *** [ 524.830429][T10779] [ 524.838598][T10779] 3 locks held by syz.4.1796/10779: [ 524.843811][T10779] #0: ffff888027cac0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 524.853953][T10779] #1: ffff888027cac650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x43c/0x1110 [ 524.863497][T10779] #2: ffff888070ae28e8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 524.873802][T10779] [ 524.873802][T10779] stack backtrace: [ 524.879722][T10779] CPU: 0 PID: 10779 Comm: syz.4.1796 Not tainted syzkaller #0 [ 524.887197][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 524.897367][T10779] Call Trace: [ 524.900750][T10779] [ 524.903703][T10779] dump_stack_lvl+0x188/0x24e [ 524.908423][T10779] ? load_image+0x400/0x400 [ 524.912949][T10779] ? show_regs_print_info+0x12/0x12 [ 524.918177][T10779] ? print_circular_bug+0x12b/0x1a0 [ 524.923421][T10779] check_noncircular+0x296/0x330 [ 524.928393][T10779] ? look_up_lock_class+0x75/0x140 [ 524.933532][T10779] ? add_chain_block+0x940/0x940 [ 524.938528][T10779] ? lockdep_lock+0xf1/0x1f0 [ 524.943157][T10779] ? _find_first_zero_bit+0xcf/0x100 [ 524.948476][T10779] __lock_acquire+0x2d07/0x7d10 [ 524.953396][T10779] ? mark_lock+0x94/0x320 [ 524.957761][T10779] ? verify_lock_unused+0x140/0x140 [ 524.962985][T10779] ? __lock_acquire+0x13cf/0x7d10 [ 524.968033][T10779] ? verify_lock_unused+0x140/0x140 [ 524.973272][T10779] ? rcu_is_watching+0x11/0xa0 [ 524.978159][T10779] lock_acquire+0x1bb/0x4a0 [ 524.982690][T10779] ? ext4_writepages+0x20f/0x2f40 [ 524.987736][T10779] ? unwind_next_frame+0x1880/0x20b0 [ 524.993044][T10779] ? __might_sleep+0xd0/0xd0 [ 524.997654][T10779] ? read_lock_is_recursive+0x10/0x10 [ 525.003058][T10779] ? mark_lock+0x94/0x320 [ 525.007506][T10779] percpu_down_read+0x44/0x1a0 [ 525.012304][T10779] ? ext4_writepages+0x20f/0x2f40 [ 525.017357][T10779] ext4_writepages+0x20f/0x2f40 [ 525.022248][T10779] ? mark_lock+0x94/0x320 [ 525.026610][T10779] ? verify_lock_unused+0x140/0x140 [ 525.031836][T10779] ? __lock_acquire+0x12f4/0x7d10 [ 525.036888][T10779] ? add_chain_block+0x940/0x940 [ 525.041864][T10779] ? mark_lock+0x94/0x320 [ 525.046237][T10779] ? ext4_read_folio+0x370/0x370 [ 525.051210][T10779] ? __lock_acquire+0x13cf/0x7d10 [ 525.056274][T10779] ? __lock_acquire+0x7d10/0x7d10 [ 525.061330][T10779] ? do_raw_spin_lock+0x128/0x2f0 [ 525.066466][T10779] ? do_raw_spin_unlock+0x11d/0x230 [ 525.071684][T10779] ? ext4_read_folio+0x370/0x370 [ 525.076653][T10779] do_writepages+0x3ba/0x640 [ 525.081274][T10779] ? __writepage+0x130/0x130 [ 525.085887][T10779] ? writeback_single_inode+0x3c0/0x8e0 [ 525.091463][T10779] ? __lock_acquire+0x7d10/0x7d10 [ 525.096540][T10779] ? do_raw_spin_lock+0x128/0x2f0 [ 525.101590][T10779] __writeback_single_inode+0x156/0x1160 [ 525.107263][T10779] writeback_single_inode+0x3cb/0x8e0 [ 525.112665][T10779] ? write_inode_now+0x210/0x210 [ 525.117631][T10779] ? ext4_xattr_inode_update_ref+0x411/0x540 [ 525.123664][T10779] write_inode_now+0x17f/0x210 [ 525.128492][T10779] ? bdi_split_work_to_wbs+0x910/0x910 [ 525.133985][T10779] ? ext4_xattr_inode_update_ref+0x411/0x540 [ 525.139997][T10779] ? do_raw_spin_unlock+0x11d/0x230 [ 525.145217][T10779] iput+0x613/0x980 [ 525.149059][T10779] ext4_xattr_block_set+0x249a/0x32b0 [ 525.154474][T10779] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 525.159964][T10779] ? ext4_xattr_block_find+0xd7/0x2b0 [ 525.165375][T10779] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 525.171309][T10779] __ext4_expand_extra_isize+0x301/0x3e0 [ 525.176970][T10779] __ext4_mark_inode_dirty+0x47f/0x770 [ 525.182472][T10779] ext4_evict_inode+0xa7f/0x1110 [ 525.187442][T10779] ? _raw_spin_unlock+0x24/0x40 [ 525.192329][T10779] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 525.198258][T10779] ? do_raw_spin_unlock+0x11d/0x230 [ 525.203475][T10779] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 525.209407][T10779] evict+0x4c9/0x8d0 [ 525.213347][T10779] ? proc_nr_inodes+0x2f0/0x2f0 [ 525.218236][T10779] ? do_raw_spin_unlock+0x11d/0x230 [ 525.223477][T10779] ? _raw_spin_unlock+0x24/0x40 [ 525.228377][T10779] ? iput+0x768/0x980 [ 525.232394][T10779] ext4_orphan_cleanup+0xbeb/0x1420 [ 525.237810][T10779] ? ext4_orphan_del+0xbf0/0xbf0 [ 525.242795][T10779] ? ext4_register_sysfs+0x27e/0x2c0 [ 525.248109][T10779] ? errseq_check_and_advance+0x62/0x120 [ 525.253792][T10779] ext4_fill_super+0x6ee3/0x78c0 [ 525.258777][T10779] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 525.265059][T10779] ? set_blocksize+0x1d0/0x470 [ 525.269859][T10779] ? sb_set_blocksize+0xa5/0xe0 [ 525.274754][T10779] get_tree_bdev+0x3f1/0x610 [ 525.279380][T10779] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 525.285658][T10779] vfs_get_tree+0x88/0x270 [ 525.290105][T10779] do_new_mount+0x24a/0xa40 [ 525.294664][T10779] __se_sys_mount+0x2e3/0x3d0 [ 525.299375][T10779] ? __x64_sys_mount+0xc0/0xc0 [ 525.304247][T10779] ? lockdep_hardirqs_on+0x94/0x140 [ 525.309472][T10779] ? __x64_sys_mount+0x1c/0xc0 [ 525.314270][T10779] do_syscall_64+0x4c/0xa0 [ 525.318714][T10779] ? clear_bhb_loop+0x60/0xb0 [ 525.323421][T10779] ? clear_bhb_loop+0x60/0xb0 [ 525.328123][T10779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.334050][T10779] RIP: 0033:0x7f008159e04a [ 525.338487][T10779] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.358123][T10779] RSP: 002b:00007f0082447e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 525.366561][T10779] RAX: ffffffffffffffda RBX: 00007f0082447ee0 RCX: 00007f008159e04a [ 525.374582][T10779] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f0082447ea0 [ 525.382663][T10779] RBP: 0000200000000180 R08: 00007f0082447ee0 R09: 0000000000000000 [ 525.390657][T10779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 525.398646][T10779] R13: 00007f0082447ea0 R14: 000000000000047a R15: 0000200000000b40 [ 525.406667][T10779] [ 525.472098][T10779] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1796: iget: bad extra_isize 58 (inode size 256) [ 525.489388][T10779] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1796: error while reading EA inode 11 err=-117 [ 525.504773][T10779] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1796: iget: bad extra_isize 58 (inode size 256) [ 525.523382][T10779] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1796: error while reading EA inode 11 err=-117 [ 525.536264][T10779] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.1796: iget: bad extra_isize 58 (inode size 256) [ 525.556230][T10779] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1796: error while reading EA inode 18 err=-117 [ 525.569870][T10779] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.1796: iget: bad extra_isize 58 (inode size 256) [ 525.589769][T10779] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1796: error while reading EA inode 18 err=-117 [ 525.605823][T10779] EXT4-fs (loop4): 1 orphan inode deleted [ 525.611699][T10779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 525.736231][ T4271] EXT4-fs (loop4): unmounting filesystem.